CVE-2026-92587

Name of the Vulnerable Software and Affected Versions n8n versions prior to 1.123.76 n8n versions prior to 2.37.7 n8n versions prior to 2.38.2

Description An authenticated user can bypass file-access checks in the Git node by nesting a repository one level below the configured repositoryPath. The system validates a relative remote URL against the repositoryPath but invokes git using that path as the working directory, allowing git to resolve the URL outside the sandbox. This enables a user to perform a fetch or pull operation to read a git repository located outside N8N RESTRICT FILE ACCESS TO and merge its objects into their own repository to access the contents.

Recommendations Update n8n to version 1.123.76. Update n8n to version 2.37.7. Update n8n to version 2.38.2. As a temporary workaround, disable the Git node by adding n8n-nodes-base.git to NODES EXCLUDE.