Listen to this Post
The vulnerability exists due to Improper Neutralization of Argument Delimiters (CWE-88) in the Git node’s `Push` operation. When n8n workflows use the Git node, arguments passed to the underlying Git command-line interface are not correctly sanitized.
An attacker with authenticated access and permissions to create or modify workflows can inject CLI flags into the Git node’s `Push` operation. By crafting a malicious workflow, the attacker supplies special command-line arguments (-- delimiters and path traversal sequences) that are appended to the Git binary call.
When the workflow runs, these injected flags cause the `git push` command to include arbitrary file paths as arguments. The Git binary then attempts to read and process those files, exposing their contents back to the attacker. This technique bypasses normal file access controls, allowing the attacker to read sensitive system files such as `/etc/passwd` or n8n’s configuration secrets.
Exploitation requires only low-privileged user access, no user interaction, and the vulnerability can be triggered remotely over the network. The flaw affects self‑hosted n8n instances and potentially cloud deployments that allow custom Git operations.
Platform: n8n Workflow
Version: <1.123.43
Vulnerability : CLI Argument Injection
Severity: Medium
date: May 13 2026
Prediction: May 12 2026
Analytics
What Undercode Say:
Threat Intelligence Summary – This CVE was published on May 13, 2026, with a CVSS 4.0 Base Score of 5.3 (Medium). The CWE-88 (Improper Neutralization of Argument Delimiters in a Command) flaw allows authenticated low‑privilege users to read arbitrary server files.
Check n8n version curl -s http://target:5678/healthz | jq .version Test for vulnerable Git node CLI injection (conceptual) Create a workflow with Git node Push operation and injected flags -- ..= -- ..= /etc/passwd
Bash Commands to Verify Patch Status
For npm installations npm list n8n For Docker deployments docker run --rm n8nio/n8n:latest n8n --version
Exploit:
A malicious authenticated user creates a workflow containing a Git node. In the node’s configuration, they inject a crafted payload into the `repository` or `branch` parameters:
--no-optional-locks --git-dir=/etc/passwd push
When the workflow executes the `Push` operation, the unsanitized flags cause the Git binary to read the `/etc/passwd` file. The output (error messages or file contents) is returned within the workflow’s execution log, allowing the attacker to exfiltrate sensitive data.
Protection from this CVE
Immediate Mitigations:
- Disable the Git node by adding `n8n-nodes-base.git` to the `NODES_EXCLUDE` environment variable.
- Upgrade to n8n version 1.123.43, 2.20.7, or 2.22.1 or later.
- Limit workflow creation permissions to only fully trusted users.
- Avoid cloning or interacting with untrusted repositories using the Git node.
Impact
- Confidentiality: An attacker can read arbitrary files on the n8n server, including configuration files, secrets, and environment variables.
- Integrity: No direct write capability, but reading sensitive data can lead to further attacks.
- Availability: No direct denial‑of‑service impact.
- Potential for full compromise if combined with other vulnerabilities or if exposed credentials are reused elsewhere.
🎯Let’s Practice Exploiting & Learn Patching For Free:
Sources:
Reported By: github.com
Extra Source Hub:
Undercode
