Servers and applications
CVE-2025-62726
n8n is an open source workflow automation platform. Prior to 1.113.0, a remote code execution vulnerability exists in the Git Node component available in both Cloud and Self-Hosted versions of n8n. When a malicious actor clones a remote repository containing a pre-commit hook, the subsequent use of the Commit operation in the Git Node can inadvertently trigger the hook’s execution. This allows…
- Severity
- High 8.8
- Published
- 30 Oct 2025
- Last changed
- 19 Oct 2026
- Added to UpHeron
- 1 Nov 2026
- Fixed in
- 1.113.0
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
n8nServers and applications · cpe:a:n8n:n8n |
|