What is CVE-2026-72767?
A critical remote code execution vulnerability exists in the Git node of the n8n workflow automation platform, allowing authenticated users with workflow creation rights to execute arbitrary code via crafted local repositories. Affected versions are before 1.123.67, before 2.31.5, and 2.32.x before 2.32.1; immediate upgrade is recommended.
Azərbaycanca: n8n iş axını avtomatlaşdırma platformasının Git node'unda autentifikasiya olunmuş istifadəçilərə xüsusi hazırlanmış lokal depo vasitəsilə uzaqdan kod icrasına (RCE) imkan verən kritik zəiflikdir. Təsirə məruz qalan versiyalar 1.123.67 öncəsi, 2.31.5 öncəsi və 2.32.1 öncəsi 2.32.x-dir; dərhal göstərilən versiyalara yenilənmə tövsiyə olunur.
Related CVEs
link basis: shared vendor: n8n
FAQ2
Who can exploit the CVE-2026-72767 vulnerability in n8n?
This RCE vulnerability can only be exploited by authenticated users with workflow creation rights.
Which n8n versions need to be upgraded for CVE-2026-72767?
All versions before 1.123.67, before 2.31.5, and 2.32.x before 2.32.1 should be immediately upgraded.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.