THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-72767 (HIGH 8.8) — n8n before 1.123.67, 2.x before 2.31.5, and 2.32.x before 2.32.1 contain a remote code execution vulnerability in the Git node. Authenticated users with rights to create and execute workflows can stage a crafted local repository that causes git to run hooks under default git secu

[NVD] CVE-2026-72767 (HIGH 8.8) — n8n before 1.123.67, 2.x before 2.31.5, and 2.32.x before 2.32.1 contain a remote code execution vulnerability in the Git node. Authenticated users with rights to create and execute workflows can stage a crafted local repository that causes git to run hooks under default git secu

lownvdPublished 2026-08-11

CVE-2026-72767 CVSS: 8.8 HIGH Published: 2026-08-11T13:19:06.940

n8n before 1.123.67, 2.x before 2.31.5, and 2.32.x before 2.32.1 contain a remote code execution vulnerability in the Git node. Authenticated users with rights to create and execute workflows can stage a crafted local repository that causes git to run hooks under default git security settings, executing arbitrary commands as the n8n

Indicators of compromise

CVE-2026-72767cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-72767