All vulnerabilities

Servers and applications

CVE-2025-62726

n8n is an open source workflow automation platform. Prior to 1.113.0, a remote code execution vulnerability exists in the Git Node component available in both Cloud and Self-Hosted versions of n8n. When a malicious actor clones a remote repository containing a pre-commit hook, the subsequent use of the Commit operation in the Git Node can inadvertently trigger the hook’s execution. This allows…

Severity
High 8.8
Published
30 Oct 2025
Last changed
19 Oct 2026
Added to UpHeron
1 Nov 2026
Fixed in
1.113.0
Sources
NVD

Affected software

SoftwareAffected versions
n8nServers and applications · cpe:a:n8n:n8n
  • Every version before 1.113.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2025-62726
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2025-62726