n8n: Race Condition in Git Clone Node Allows Authenticated Users to Achieve Remote Code Execution
n8n
- Severity
- High, CVSS 7.5
- CVSS vector
- CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
- Record
- CVE-2026-65598
- Affects
- n8n
- Known exploited
- Not listed in the CISA Known Exploited Vulnerabilities catalog
- Published
- Record first published by the source
- July 22, 2026
- Source last modified
- October 24, 2026
Description
n8n before 1.123.64, 2.29.8, and 2.30.1 contains a TOCTOU race condition in the Git node's clone operation that allows authenticated users to bypass path restrictions by swapping a directory for a symlink after the path is validated but before the clone runs. This lets an attacker plant a crafted repository in the community node directory, which n8n loads as a custom node on the next restart, executing arbitrary JavaScript on the server. Both self-hosted and cloud instances are affected.
Description quoted from the NVD record.
Who is affected
n8n is a tool for automating tasks by linking apps and online services into workflows. This flaw affects versions before 1.123.64, 2.29.8 and 2.30.1, on both self-hosted and cloud setups. It is in the building block that copies code from a Git repository (a place where code is stored). Someone with an account on your n8n could exploit a timing gap to get around its folder limits and plant a harmful add-on. n8n then loads that add-on at its next restart, letting them run any code they choose on the server. This flaw is rated High.
What to do
- If you run n8n yourself, the person who installed it should update it to
1.123.64,2.29.8or2.30.1(or a later release), whichever matches the version line you use. - If you use n8n's cloud service, or an IT provider or vendor runs n8n for your organization, send them this advisory and ask when the update will be done.
- If you are not sure which version you have, ask the person or provider who manages n8n to compare it with the fixed versions above.
Analysis written from the source record as of October 24, 2026 and reviewed before publishing.