Improper access control in n8n - #VU146788
Published: September 2, 2026
Vulnerability identifier: #VU146788
CSH Severity: Low
CVSS v4: 5.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: N/A
CWE-ID: CWE-284
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote user to disclose sensitive information.
The vulnerability exists due to improper access control in the Git node when processing a relative remote URL during fetch or pull operations. A remote user can configure a nested repository and use the same relative remote URL to cause git to resolve it outside the intended file sandbox and disclose sensitive information.
The issue occurs because the URL was validated against the configured repository path, but git resolved it from the enclosing repository\'s top-level working directory.
Affected software
n8n
Remediation
Install security update from vendor's website.
n8n - addressed in versions 1.123.76, 2.37.7, 2.38.2