A race condition in n8n allows authenticated attackers to achieve remote code execution during Git repository interactions, threatening the host environment.

The software contains a time-of-check time-of-use (TOCTOU) race condition during the Git clone process. An authenticated attacker can manipulate this timing to inject malicious payloads, leading to remote code execution.

Successful exploitation allows an attacker to execute arbitrary commands on the server hosting n8n. This breach can result in the loss of proprietary workflows, credentials stored within the tool, and potential lateral movement into the internal network. The high CVSS score of 8.9 reflects the significant danger posed by this remote code execution capability.

Immediate Action: Apply the vendor-provided security updates by upgrading to version 1.123.64, 2.30.1, or 2.29.8.

Proactive Monitoring: Monitor server logs for unexpected process execution or abnormal Git-related activity occurring within the n8n application environment.

Compensating Controls: Restrict the ability of the n8n service to initiate external connections to untrusted Git repositories if such functionality is not strictly required for business operations.

Public Exploit Available: No

Administrators must perform the recommended software update immediately. Given the technical nature of this race condition, patching is the only reliable method to eliminate the vulnerability.