{"id":"EUVD-2026-38484","enisaUuid":"f8377b09-a522-3067-bae6-8b44c66cc2bf","description":"n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an authenticated user with permission to create or modify workflows could inject CLI flags on the Git node\u0027s Push operation allowing an attacker to read arbitrary files from the n8n server potentially leading to full compromise. This vulnerability is fixed in 1.123.43, 2.22.1, and 2.20.7.","datePublished":"Jun 23, 2026, 3:53:13 PM","dateUpdated":"Jun 23, 2026, 5:33:24 PM","baseScore":9.4,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","references":"https://github.com/n8n-io/n8n/security/advisories/GHSA-57g9-58c2-xjg3\n","aliases":"CVE-2026-44790\nGHSA-57g9-58c2-xjg3\n","assigner":"GitHub_M","epss":0.53,"enisaIdProduct":[{"id":"e0545c9f-ecd7-35f7-a03b-0a649fbdcd35","product":{"name":"n8n","vendor":{"name":"n8n-io"}},"product_version":"2.0.0-rc.0, \u003c 2.20.7"},{"id":"e8d48d8a-941a-3c9d-9d3d-9cd6a40b4587","product":{"name":"n8n","vendor":{"name":"n8n-io"}},"product_version":"2.21.0, \u003c 2.21.1"},{"id":"f83c3cbb-0c02-3b6c-81f6-9e23213ba664","product":{"name":"n8n","vendor":{"name":"n8n-io"}},"product_version":"\u003c 1.123.43"}],"enisaIdVendor":[{"id":"34d3e20c-07d0-3fa0-8940-7d7e1eeaeba1","vendor":{"name":"n8n-io"}}],"enisaIdVulnerability":[{"id":"19624808-2ba4-38dc-a032-f659ca93fdbd","vulnerability":{"id":"CVE-2026-44790","description":"n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an authenticated user with permission to create or modify workflows could inject CLI flags on the Git node\u0027s Push operation allowing an attacker to read arbitrary files from the n8n server potentially leading to full compromise. This vulnerability is fixed in 1.123.43, 2.22.1, and 2.20.7.","datePublished":"Jun 23, 2026, 3:53:13 PM","dateUpdated":"Jun 23, 2026, 5:33:24 PM","status":"PUBLISHED","baseScore":9.4,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","references":"https://github.com/n8n-io/n8n/security/advisories/GHSA-57g9-58c2-xjg3\n","enisa_id":"EUVD-2026-38484\n","assigner":"GitHub_M","epss":0.53,"dataProcessed":"Nov 1, 2026, 7:18:42 AM","vulnerabilityProduct":[{"id":"275cb33c-625f-36b7-869f-9ddf6bb6c89e","product":{"name":"n8n","vendor":{"name":"n8n-io"}},"product_version":"2.21.0, \u003c 2.21.1"},{"id":"478beef5-3787-3cbe-a59f-8a2ef2ea8618","product":{"name":"n8n","vendor":{"name":"n8n-io"}},"product_version":"\u003c 1.123.43"},{"id":"50b12e74-1891-31f5-8651-b59b1d1de3a3","product":{"name":"n8n","vendor":{"name":"n8n-io"}},"product_version":"2.0.0-rc.0, \u003c 2.20.7"}],"vulnerabilityVendor":[{"id":"bda282da-5f0c-35bf-b80f-e8396407b026","vendor":{"name":"n8n-io"}}]}},{"id":"24478d2a-7cc6-32a4-9c7e-762028a39ac1","vulnerability":{"id":"GHSA-57g9-58c2-xjg3","description":"n8n Has an Arbitrary File Read via Git Node","datePublished":"May 14, 2026, 4:17:35 PM","dateUpdated":"Jul 20, 2026, 1:40:47 PM","baseScore":0.0,"references":"https://github.com/n8n-io/n8n/security/advisories/GHSA-57g9-58c2-xjg3\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-44790\nhttps://github.com/n8n-io/n8n\n","enisa_id":"EUVD-2026-38484\n","aliases":"CVE-2026-44790\nGHSA-57g9-58c2-xjg3\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:00:21 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[{"id":"985aaaa1-3bf6-3d00-8684-618edd4a4742","advisory":{"id":"WID-SEC-W-2026-1519","description":"n8n: Mehrere Schwachstellen","summary":"Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in n8n ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmaßnahmen zu umgehen, SQL-Injection-Angriffe durchzuführen, Daten zu manipulieren oder vertrauliche Informationen offenzulegen.","datePublished":"May 12, 2026, 10:00:00 PM","dateUpdated":"Jun 22, 2026, 10:00:00 PM","baseScore":0.0,"references":"https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1519.json\nhttps://wid.cert-bund.de/portal/wid/securityadvisory?name\u003dWID-SEC-2026-1519\n","aliases":"CVE-2026-44789\nCVE-2026-44790\nCVE-2026-44791\nCVE-2026-44792\nCVE-2026-45732\nCVE-2026-56348\n","source":{"id":8,"name":"csaf_certbund"},"advisoryProduct":[{"id":"876ce0a6-cb42-3ffa-84fb-11f240950a2f","product":{"name":"n8n","vendor":{"name":"n8n-io"}}},{"id":"bc6a8942-a8dc-3147-814d-e2522d79d961","product":{"name":"2.21.1","vendor":{"name":"Barco"}}},{"id":"ca630acb-95a7-32bc-a4dd-069d9fea0b5a","product":{"name":"2.20.7","vendor":{"name":"n8n"}}},{"id":"da0d04df-cc70-3ea5-b822-199d410674cb","product":{"name":"2.20.0","vendor":{"name":"n8n"}}},{"id":"f123590f-7218-34f0-942b-3c5437453fbb","product":{"name":"1.123.43","vendor":{"name":"n8n"}}},{"id":"ffcf765e-b681-37d8-80f9-df47bcbb0ca4","product":{"name":"2.22.1","vendor":{"name":"Dell"}}}]}}]}