Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2026-92587— n8n before 1.123.76 Sandbox Escape via Git Relative URL

Quick assessment

Affected
n8n-io n8n
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

n8n 是一个工作流自动化平台。在 1.123.76、2.37.7 和 2.38.2 之前的版本中，Git 节点会将相对远程 URL 与配置的 进行校验，但随后却以该路径作为工作目录调用 命令；而 会自动向上遍历至包含该路径的最高级仓库目录，并从该顶层目录解析同一相对 URL。因此，经过身份验证的用户（成员）只需将仓库嵌套在配置路径下一级，即可让完全相同的 URL 字符串通过文件访问检查，而 实际在沙箱外部解析该 URL。随后的 或 操作会读取位于 范围之外的 git 仓库，并将其对象合并到用户自己的仓库中，从而可

CVSS 5.0 · Medium
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-92587

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
n8n before 1.123.76 Sandbox Escape via Git Relative URL
Source: CVE Program / CVE List V5
Vulnerability Description
n8n is a workflow automation platform. In versions before 1.123.76, 2.37.7, and 2.38.2, the Git node validated a relative remote URL against the configured repositoryPath but then invoked git with that path as its working directory; git walked up to the enclosing repository's top level and resolved the same relative URL from there. An authenticated user (member) who nested the repository one level below the configured path could therefore make an identical URL string pass the file-access check while git resolved it outside the sandbox. A subsequent fetch or pull read a git repository outside N8N_RESTRICT_FILE_ACCESS_TO and merged its objects into the user's own repository, where their contents could be read back. The issue is fixed in n8n 1.123.76, 2.37.7, and 2.38.2, which resolve the remote reference from the directory git actually operates in before applying the sandbox check. As a workaround, the Git node can be disabled by adding n8n-nodes-base.git to NODES_EXCLUDE.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
不可信的搜索路径
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
n8n-io n8n 0 ~ 1.123.76 -
n8n-io n8n 0 ~ 2.38.2 -
n8n-io n8n 0 ~ 2.37.7 -

II. Public POCs for CVE-2026-92587

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-92587

请登录查看更多情报信息。

Other References for CVE-2026-92587 (2)

IV. Related Vulnerabilities

Same product: n8n
Same vendor: n8n-io
Same weakness: CWE-426

V. Comments for CVE-2026-92587

No comments yet

Leave a comment