CVE-2026-85168GHSA-mwp5-2m32-r54h

n8n before 1.123.73 Remote Code Execution via Git Node

n8n-io n8nFrameworks

CVSS

7.7High

ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV

Exploit odds (EPSS)0.83%Chance of exploitation activity in the next 30 days, higher than 57% of CVEs. Scored 24 Oct 2026FIRST EPSS

Fixed in1.123.73Also 2.36.2, 2.35.4CVE List

Published3 Sep 2026Updated 4 Sep 2026CVE List

What fixes it

1.123.73n8nCVE List
2.36.2n8nCVE List
2.35.4n8nCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Timeline

3 Sep 2026, 11:22 UTCPublishedCVE List
24 Oct 2026, 23:56 UTCExploit code publicGitHub proof-of-concept repositories

Reports 1

1 outlet mention it. Reports are not confirmation; each links to its source.

Boreas37/CVE-2026-85168-PoC: CVE-2026-85168 — n8n Git node RCE from repo-local filter.*.clean / merge-driver config on add|commit|checkout. Verified v2.35.3 / v2.36.2.GitHub proof-of-concept repositories, 24 Oct 2026Exploit code

Description

n8n versions before 1.123.73, 2.35.4, and 2.36.2 contain a remote code execution vulnerability in the Git node. The node reset a fixed list of command-bearing configuration keys before each operation, but that list did not cover the content-filter and merge-driver key families. A repository with local configuration setting one of those keys together with a matching attribute pattern causes git to execute the configured command during an ordinary Add, Commit, Checkout, or Pull operation. The command runs as the n8n process user.

Text from CVE List

Affected versions 6

n8naffected: all versions before 1.123.73CVE List
n8nunaffected: 1.123.73CVE List
n8naffected: all versions before 2.36.2CVE List
n8nunaffected: 2.36.2CVE List
n8naffected: all versions before 2.35.4CVE List
n8nunaffected: 2.35.4CVE List