CVE-2026-110845— n8n before 1.123.83, 2.41.4, and 2.42.1 Code Execution via Git Node Log Operation
Quick assessment
Affected
n8n-io n8n
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在 n8n 1.123.83 之前的版本、2.x 系列 2.41.4 之前的版本，以及 2.42.x 系列 2.42.1 之前的版本中，Git 节点的日志（Log）操作存在代码执行漏洞。该漏洞源于在调用外部程序时，未剥离仓库的本地 Git 配置。已通过身份验证且能够配置该节点（包括将其用作代理工具）指向某个仓库的用户，若控制了该仓库的本地配置，即可以运行 n8n 进程的用户的身份执行任意程序。
Possible ATT&CK Techniques 1 AI
T1059 · Command and Scripting Interpreter
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-110845
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
n8n before 1.123.83, 2.41.4, and 2.42.1 Code Execution via Git Node Log Operation
Source: CVE Program / CVE List V5
Vulnerability Description
n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains a code execution vulnerability in the Git node Log operation, which fails to strip a repository's local git configuration before invoking an external program. Authenticated members who can point the node, including as an agent tool, at a repository whose local configuration they control can execute programs as the n8n process user.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
系统设置或配置在外部可控制
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-110845
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-110845
请登录查看更多情报信息。
Other References for CVE-2026-110845 (2)
Same Patch Batch · n8n-io · 2026-10-14 · 14 CVEs total
| CVE-2026-110843 | 8.2 HIGH | n8n before 2.41.4 and 2.42.1 Unauthenticated Unbounded OAuth Client Persistence via Author |
| CVE-2026-110842 | 7.7 HIGH | n8n before 2.41.4 and 2.42.1 Prototype Pollution via MCP Workflow-Validation Interpreter |
| CVE-2026-110850 | 7.2 HIGH | n8n before 2.41.4 and 2.42.1 Credential Check Bypass via Agent Node Parameters |
| CVE-2026-110844 | 7.2 HIGH | n8n before 1.123.83 Credential Authorization Bypass via Nested Inline Sub-Workflows |
| CVE-2026-110849 | 7.2 HIGH | n8n before 1.123.83, 2.41.4, and 2.42.1 Stored XSS via Binary-Data File Preview |
| CVE-2026-110853 | 7.1 HIGH | n8n before 1.123.83 Authorization Bypass via Execute Sub-workflow Inline JSON |
| CVE-2026-110846 | 7.0 HIGH | n8n before 2.41.4 and 2.42.1 Send-and-Wait HMAC Signature Bypass via Waiting-Webhook |
| CVE-2026-110847 | 7.0 HIGH | n8n before 1.123.83, 2.41.4, and 2.42.1 Stored XSS via Chat Trigger customCss Parameter |
| CVE-2026-110840 | 7.0 HIGH | n8n before 2.41.4 and 2.42.1 SQL Injection via Microsoft SQL Node Query Field |
| CVE-2026-110852 | 6.3 MEDIUM | n8n before 1.123.83, 2.41.4, and 2.42.1 Unauthenticated Workflow Execution via Dynamic-Pat |
| CVE-2026-110851 | 6.1 MEDIUM | n8n before 2.41.4 and 2.42.1 Cross-Project Agent Ownership Transfer via Agents Create Endp |
| CVE-2026-110841 | 6.1 MEDIUM | n8n before 2.41.4 and 2.42.0 Authorization Bypass in Agent Chat Resume Tool Approval |
| CVE-2026-110848 | 6.0 MEDIUM | n8n before 1.123.83, 2.41.4, and 2.42.1 Prototype Pollution via AI Workflow Builder Connec |
IV. Related Vulnerabilities
Same product: n8n
-
CVE-2026-110853
n8n before 1.123.83 Authorization Bypass via Execute Sub-wor -
CVE-2026-110852
n8n before 1.123.83, 2.41.4, and 2.42.1 Unauthenticated Work -
CVE-2026-110851
n8n before 2.41.4 and 2.42.1 Cross-Project Agent Ownership T -
CVE-2026-110850
n8n before 2.41.4 and 2.42.1 Credential Check Bypass via Age -
CVE-2026-110849
n8n before 1.123.83, 2.41.4, and 2.42.1 Stored XSS via Binar
Same vendor: n8n-io
-
CVE-2026-110853
n8n before 1.123.83 Authorization Bypass via Execute Sub-wor -
CVE-2026-110852
n8n before 1.123.83, 2.41.4, and 2.42.1 Unauthenticated Work -
CVE-2026-110851
n8n before 2.41.4 and 2.42.1 Cross-Project Agent Ownership T -
CVE-2026-110850
n8n before 2.41.4 and 2.42.1 Credential Check Bypass via Age -
CVE-2026-110849
n8n before 1.123.83, 2.41.4, and 2.42.1 Stored XSS via Binar
Same weakness: CWE-15
-
CVE-2025-68403
Inadequate Steps to Confirm Vulnerability in QuRouter -
CVE-2026-96188
Microsoft PowerToys Elevation of Privilege Vulnerability -
CVE-2026-73027
Windows Setup Files Cleanup Elevation of Privilege Vulnerabi -
CVE-2026-96218
Windows Update Stack Tampering Vulnerability -
CVE-2026-107818
MariaDB: environment injection via wsrep bootstrap in the ma
V. Comments for CVE-2026-110845
No comments yet