Skip to content
Threat Feed

Tag

CVE-2026-44790

1 brief RSS
critical advisory

n8n Arbitrary File Read via Git Node (CVE-2026-44790)

An authenticated user with workflow creation or modification permissions can inject CLI flags into the Git node's Push operation, leading to arbitrary file read on the n8n server; patched in versions 1.123.43, 2.20.7, and 2.22.1, and tracked as CVE-2026-44790.

n8n +2 arbitrary file read git node CVE-2026-44790
2r 1t