CVE-2026-110845

Name of the Vulnerable Software and Affected Versions n8n versions prior to 1.123.83 n8n versions prior to 2.41.4 n8n versions prior to 2.42.1

Description The Git node Log operation fails to strip a repository's local git configuration before invoking an external program. This allows authenticated members who can point the node, including when used as an agent tool, at a repository with a local configuration they control to execute programs as the n8n process user.

Recommendations Update to version 1.123.83 or later. Update to version 2.41.4 or later. Update to version 2.42.1 or later.