CVE-2025-65964

n8n is an open source workflow automation platform. Versions 0.123.1 through 1.119.1 do not have adequate protections to prevent RCE through the project's pre-commit hooks. The Add Config operation allows workflows to set arbitrary Git configuration values, including core.hooksPath, which can point to a malicious Git hook that executes arbitrary commands on the n8n host during subsequent Git operations. Exploitation requires the ability to create or modify an n8n workflow using the Git node. This issue is fixed in version 1.119.2. Workarounds include excluding the Git Node (Docs) and avoiding cloning or interacting with untrusted repositories using the Git Node.

• CWE-829

• https://github.com/n8n-io/n8n/commit/d5a1171f95f75def5c3ac577707ab913e22aef04Patch
• https://github.com/n8n-io/n8n/releases/tag/n8n%401.119.2Release Notes
• https://github.com/n8n-io/n8n/security/advisories/GHSA-wpqc-h9wp-chmqExploit, Vendor Advisory
• https://n8n-docs.teamlab.info/hosting/securing/blocking-nodes/#exclude-nodesThird Party Advisory

Published

Dec 9, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-65959Open WebUI is a self-hosted artificial intelligence platform…5.4
• CVE-2025-6596Improper Neutralization of Input During Web Page Generation …0
• CVE-2025-65960Contao is an Open Source CMS. From version 4.0.0 to before 4…6.6
• CVE-2025-65961Contao is an Open Source CMS. From version 4.0.0 to before 4…4.8
• CVE-2025-65962Tuleap is a free and open source suite for management of sof…4.3
• CVE-2025-65963Files is a module for managing files inside spaces and user …5.4
• CVE-2025-65965Grype is a vulnerability scanner for container images and fi…8.2
• CVE-2025-65966OneUptime is a solution for monitoring and managing online s…8.1
• CVE-2025-6597Vulnerability in Wikimedia Foundation MediaWiki. This vulner…0
• CVE-2025-6599An uncontrolled resource consumption vulnerability in the we…7.5
• CVE-2025-65995When a DAG failed during parsing, Airflow’s error-reporting …6.5
• CVE-2025-65998Apache Syncope can be configured to store the user password …7.5