CVE-2026-77084 n8n before 1.123.69 Remote Code Execution via Git Node Configuration Values

What is CVE-2026-77084?

CVE-2026-77084 is a high-severity command injection vulnerability in N8n N8n, published on 20 Aug 2026. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

n8n before 1.123.69 (and 2.x before 2.33.4 / 2.34.1) contains a code execution vulnerability in the Git node. The Git node executed certain repository-local git configuration values without neutralizing them, so any subsequent Git node operation against a repository containing a malicious value would execute it as the n8n process user. This is not reachable through the Git node's own configuration controls and requires a separate file-write vulnerability elsewhere to plant the malicious value.

Weakness: CWE-78

Which versions are affected by CVE-2026-77084?

It affects 1 product.

Products include N8n N8n.

How do I fix CVE-2026-77084?

Upgrade to a fixed version.

Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.

Is CVE-2026-77084 being exploited?

There is no known exploitation of CVE-2026-77084 in the wild and no public exploit code.

Other vulnerabilities in N8n N8n

• CVE-2025-68613 n8n Improper Control of Dynamically-Managed Code Resources Exploited Critical 10.0
• CVE-2026-21877 n8n is vulnerable to Remote Code Execution via Arbitrary File Write Critical 10.0
• CVE-2026-21858 n8n Vulnerable to Unauthenticated File Access via Improper Webhook Request Handling Critical 10.0
• CVE-2026-1470 n8n Unsafe Workflow Expression Evaluation Allows Remote Code Execution Critical 9.9
• CVE-2025-68668 n8n Vulnerable to Arbitrary Command Execution in Pyodide based Python Code Node Critical 9.9

All N8n N8n vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• GitHub advisory
• How this page is made

Also known as GHSA-fv4x-pgrr-xh57, GHSA-m87g-qr43-ccvc, MINI-254f-8cvj-374r.