n8n Vulnerable to Remote Code Execution via Git Node Custom Pre-Commit Hook

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2025-65964 · Microsoft / collected KEV context

EUVD-2025-201815

GHSA-wpqc-h9wp-chmq

cve-program · CVE-2025-65964

• https://github.com/n8n-io/n8n/security/advisories/GHSA-wpqc-h9wp-chmq
• https://github.com/n8n-io/n8n/commit/d5a1171f95f75def5c3ac577707ab913e22aef04
• https://github.com/n8n-io/n8n/releases/tag/n8n%401.119.2
• https://n8n-docs.teamlab.info/hosting/securing/blocking-nodes/#exclude-nodes

euvd · EUVD-2025-201815

• https://github.com/n8n-io/n8n/security/advisories/GHSA-wpqc-h9wp-chmq
• https://github.com/n8n-io/n8n/commit/d5a1171f95f75def5c3ac577707ab913e22aef04
• https://github.com/n8n-io/n8n/releases/tag/n8n%401.119.2
• https://n8n-docs.teamlab.info/hosting/securing/blocking-nodes/#exclude-nodes

nvd · CVE-2025-65964

• https://github.com/n8n-io/n8n/commit/d5a1171f95f75def5c3ac577707ab913e22aef04
• https://github.com/n8n-io/n8n/releases/tag/n8n%401.119.2
• https://github.com/n8n-io/n8n/security/advisories/GHSA-wpqc-h9wp-chmq
• https://n8n-docs.teamlab.info/hosting/securing/blocking-nodes/#exclude-nodes

osv · GHSA-wpqc-h9wp-chmq

• https://github.com/n8n-io/n8n/security/advisories/GHSA-wpqc-h9wp-chmq
• https://nvd.nist.gov/vuln/detail/CVE-2025-65964
• https://github.com/n8n-io/n8n/commit/d5a1171f95f75def5c3ac577707ab913e22aef04
• https://github.com/n8n-io/n8n
• https://github.com/n8n-io/n8n/releases/tag/n8n%401.119.2
• https://n8n-docs.teamlab.info/hosting/securing/blocking-nodes/#exclude-nodes

No related operational record is retained in the current change model.