A critical OS command injection vulnerability in the n8n Git node allows an authenticated attacker to execute arbitrary commands, leading to full system compromise.

This flaw (CWE-78) occurs in the Git node, where improper neutralization of special elements allows an authenticated attacker to inject and execute arbitrary OS commands on the host server.

Exploitation of this vulnerability grants an attacker the ability to run arbitrary commands with the privileges of the n8n service, which can lead to data theft, lateral movement, or complete system takeover. With a CVSS score of 8.7, this vulnerability represents a high-risk scenario for organizations utilizing the Git integration in their workflows.

Immediate Action: Update n8n to version 1.123.67, 2.32.1, or 2.31.5 as appropriate for your current deployment branch.

Proactive Monitoring: Review audit logs for suspicious Git-related operations and monitor for unusual child processes spawned by the n8n application.

Compensating Controls: If immediate patching is not feasible, restrict user access to the Git node functionality and ensure the application is running in a highly restricted, non-privileged container environment.

Public Exploit Available: Unknown.

Administrators must treat this vulnerability with high urgency. Applying the provided updates is the only effective way to remediate this command injection risk and ensure the continued security of the host infrastructure.