Fatihhcelik

n8n is an open source workflow automation platform. An authenticated user with permission to create or modify workflows could chain the Read/Write Files from Disk node with git operations to achieve remote code execution. By writing to specific configuration files and then triggering a git operation, an attacker could execute arbitrary shell commands on the n8n host. The issue involves the interaction between the Read/Write Files from Disk node and git operations, potentially allowing an attacker to manipulate configuration files and subsequently execute commands. The `Read/Write Files from Disk` node and git operations are involved in the exploitation process.

n8n is an open-source workflow automation platform. An authenticated user with permission to create or modify workflows can exploit crafted expressions in workflow parameters to trigger system command execution on the host running n8n. This allows for potential full server compromise, including the theft of API keys, credentials, and secrets. The issue stems from an expression escape vulnerability and incomplete AST-based sanitization. Public exploits are available.

n8n, an open source workflow automation platform, contains a flaw in the Git node. This allows authenticated users with create or modify permissions for workflows to execute arbitrary system commands or read arbitrary files on the n8n host. The issue impacts systems where users have the ability to create or modify workflows. No information is available regarding the number of potentially affected devices worldwide or any real-world incidents of exploitation. The Git node is a component used for interacting with Git repositories. The `Git node` allows users to perform actions such as cloning, pulling, and pushing changes to Git repositories.

An authenticated user with permissions to create or modify workflows can abuse crafted expressions within workflow parameters to trigger unintended system command execution on the host running the platform. This occurs because expressions supplied during workflow configuration may be evaluated in an execution context that is not sufficiently isolated from the underlying runtime, allowing for a sandbox escape. Successful exploitation can lead to a full compromise of the instance, including unauthorized access to sensitive data and execution of system-level operations with the privileges of the n8n process.

An issue exists in the workflow expression evaluation system where expressions provided by authenticated users during workflow configuration may be evaluated in an execution context that is not sufficiently isolated from the underlying runtime. An authenticated attacker can abuse this behavior to execute arbitrary code with the privileges of the n8n process, potentially leading to a full compromise of the instance, unauthorized access to sensitive data, and execution of system-level operations. Approximately 24,700 unpatched instances have been reported as reachable on the internet, and the flaw has been actively exploited by the Zerobot botnet.