CVE-2026-65598
HIGH
MEDIUM
Priority: 0.03
BB Relevance:
58/100
Published: 2026-07-22
Modified: 2026-10-24
First seen: 2026-10-29
Status: active
Attack Surface
Network
No Interaction
Conf. Impact
Integ. Impact
CVSS Vector Breakdown
AV:
Network
AC:
High
PR:
Low
UI:
None
S:
X
AT:
Present
VC:
High
VI:
High
VA:
High
Description
n8n before 1.123.64, 2.29.8, and 2.30.1 contains a TOCTOU race condition in the Git node's clone operation that allows authenticated users to bypass path restrictions by swapping a directory for a symlink after the path is validated but before the clone runs. This lets an attacker plant a crafted repository in the community node directory, which n8n loads as a custom node on the next restart, executing arbitrary JavaScript on the server. Both self-hosted and cloud instances are affected.
Weakness Classification (1)
Affected Software (6)
References & Advisories (2)
Third Party Advisory
Mitigation
Vendor Advisory