PT-2026-6262 · N8N · N8N

Fatihhcelik + 2 · Published 2026-02-04 · Updated 2026-02-06 · CVE-2026-25053

Positive Technologies (AI Summary)

CVSS v3.1

9.9

Critical

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions n8n versions prior to 1.123.10 n8n versions prior to 2.5.0

Description n8n, an open source workflow automation platform, contains a flaw in the Git node. This allows authenticated users with create or modify permissions for workflows to execute arbitrary system commands or read arbitrary files on the n8n host. The issue impacts systems where users have the ability to create or modify workflows. No information is available regarding the number of potentially affected devices worldwide or any real-world incidents of exploitation. The Git node is a component used for interacting with Git repositories. The Git node allows users to perform actions such as cloning, pulling, and pushing changes to Git repositories.

Recommendations Upgrade to n8n version 1.123.10 or later. Upgrade to n8n version 2.5.0 or later. If upgrading is not immediately possible, limit workflow creation and editing permissions to fully trusted users only. If upgrading is not immediately possible, restrict or disable access to the Git node if it is not essential for operations. If upgrading is not immediately possible, deploy n8n in a hardened environment with restricted operating system privileges and network access.

Exploit

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

BDU:2026-02168

CVE-2026-25053

GHSA-9G95-QF3F-GGRW

Affected Products

N8N

References · 17

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/25xxx/CVE-2026-25053.json · Exploit
• 🔥 https://github.com/yadhukrishnam/CVE-2026-25053 · Exploit
• https://github.com/n8n-io/n8n/security/advisories/GHSA-9g95-qf3f-ggrw · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-25053 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-9g95-qf3f-ggrw · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-02168 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-25053 · Security Note
• https://github.com/n8n-io/n8n · Note
• https://twitter.com/PurpleOps_io/status/2019803847481245928 · Twitter Post
• https://twitter.com/TheHackerWire/status/2019531758774153416 · Twitter Post
• https://twitter.com/fatihclk01/status/2019055577393938651 · Twitter Post
• https://twitter.com/HunterMapping/status/2019616415331004545 · Twitter Post
• https://twitter.com/CVEnew/status/2019110903510372430 · Twitter Post
• https://twitter.com/AhammodOvi69/status/2019422819944157578 · Twitter Post
• https://twitter.com/pulsepatchio/status/2019426476144349538 · Twitter Post