CVE-2025-62726Published
n8n Vulnerable to Remote Code Execution via Git Node Pre-Commit Hook
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2025-62726 · Microsoft / collected KEV context
cve-program · CVE-2025-62726
- https://github.com/n8n-io/n8n/security/advisories/GHSA-xgp7-7qjq-vg47
- https://github.com/n8n-io/n8n/pull/19559
- https://github.com/n8n-io/n8n/commit/5bf3db5ba84d3195bbe11bbd3c62f7086e090997
euvd · EUVD-2025-37026
- https://github.com/n8n-io/n8n/security/advisories/GHSA-xgp7-7qjq-vg47
- https://github.com/n8n-io/n8n/pull/19559
- https://github.com/n8n-io/n8n/commit/5bf3db5ba84d3195bbe11bbd3c62f7086e090997
nvd · CVE-2025-62726
- https://github.com/n8n-io/n8n/commit/5bf3db5ba84d3195bbe11bbd3c62f7086e090997
- https://github.com/n8n-io/n8n/pull/19559
- https://github.com/n8n-io/n8n/security/advisories/GHSA-xgp7-7qjq-vg47
osv · GHSA-xgp7-7qjq-vg47
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.