Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2026-44790
8.8
HIGHCVSS v3
Published
June 23, 2026
Affected
5 projects
Assigned by
GitHub
Severity scale
010
Description
n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an authenticated user with permission to create or modify workflows could inject CLI flags on the Git node's Push operation allowing an attacker to read arbitrary files from the n8n server potentially leading to full compromise. This vulnerability is fixed in 1.123.43, 2.22.1, and 2.20.7.
n8n-io/n8n
GitHubFair-code workflow automation platform with native AI capabilities. Combine visual building with custom code, self-host or cloud, 400+ integrations.
GitHubFair-code workflow automation platform with native AI capabilities. Combine visual building with custom code, self-host or cloud, 400+ integrations.< 1.123.43, >= 2.0.0, < 2.20.7, >= 2.21.0, < 2.22.1NVD
n8nio/n8n
Docker HubFree and open fair-code licensed node based Workflow Automation Tool.
Docker HubFree and open fair-code licensed node based Workflow Automation Tool.< 1.123.43, >= 2.0.0, < 2.20.7, >= 2.21.0, < 2.22.1NVD
NPM