PT-2026-77137 · N8N · N8N

CVE-2026-71539

·

Published

2026-07-22

·

Updated

2026-08-19

CVSS v4.0

8.9

High

VectorAV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Name of the Vulnerable Software and Affected Versions n8n versions prior to 1.123.64 n8n versions prior to 2.29.8 n8n versions prior to 2.30.1
Description The Git node clone operation allows an authenticated workflow user to replace a validated directory with a symlink before the cloning process occurs. This allows the user to place a crafted repository into the community node directory, which is then loaded as a custom JavaScript node upon server restart, leading to arbitrary code execution on the server.
Recommendations Update to version 1.123.64. Update to version 2.29.8. Update to version 2.30.1.

Exploit

Fix

Time Of Check To Time Of Use

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-71539
GHSA-G3R5-9H93-4J2C

Affected Products

N8N