CyberSIXT Search
NVD
Not scored
CVE-2026-25053

n8n is Vulnerable to OS Command Injection in Git Node

n8n-ion8n

Status
  • Not in CISA KEV
Exploit probabilityEPSSchecked 25 Oct
0.6%probability of exploitation in the next 30 days

Higher than 50% of scored CVEs

SeverityCVSS
–Not scored yet

Description NVD

n8n is an open source workflow automation platform. Prior to versions 1.123.10 and 2.5.0, vulnerabilities in the Git node allowed authenticated users with permission to create or modify workflows to execute arbitrary system commands or read arbitrary files on the n8n host. This issue has been patched in versions 1.123.10 and 2.5.0.

Coverage 1 article · 1 outlet

First in our coverage: SecurityOnline, 6 FebRSS feed
  1. Popular n8n Platform Hit by Triple Threat of RCE FlawsSecurityOnline · first in our coverage

References

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.

↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device