PT-2025-49610 · N8N · N8N

Published

2025-12-08

·

Updated

2025-12-28

·

CVE-2025-65964

CVSS v4.0

9.4

Critical

VectorAV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Name of the Vulnerable Software and Affected Versions n8n versions 0.123.1 through 1.119.1
Description n8n is an open source workflow automation platform. Versions 0.123.1 through 1.119.1 lack sufficient protections against Remote Code Execution (RCE) through the project's pre-commit hooks. The Add Config operation allows workflows to set arbitrary Git configuration values, including core.hooksPath, which can be directed to a malicious Git hook. This hook can then execute arbitrary commands on the n8n host during subsequent Git operations. Exploitation requires the ability to create or modify an n8n workflow using the Git node.
Recommendations Upgrade to version 1.119.2. Exclude the Git Node. Avoid cloning or interacting with untrusted repositories using the Git Node.

Exploit

Fix

RCE

Weakness Enumeration

CWE-829

Related Identifiers

CVE-2025-65964
GHSA-WPQC-H9WP-CHMQ

Affected Products

N8N