CVE-2026-110845
2026-10-14
23h17 +00:00
23h17 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
CVE 描述
n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains a code execution vulnerability in the Git node Log operation, which fails to strip a repository's local git configuration before invoking an external program. Authenticated members who can point the node, including as an agent tool, at a repository whose local configuration they control can execute programs as the n8n process user.
CVE 資訊
相關弱點
| 弱點名稱 | 來源 | |
|---|---|---|
| External Control of System or Configuration Setting One or more system settings or configuration elements can be externally controlled by a user. |
