CVE-2026-110845None▾ Sunlitn8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains a code execution vulnerability in the Git node Log operation, which fails to strip a repository's local git configuration before invoking an external program. Auth…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains a code execution vulnerability in the Git node Log operation, which fails to strip a repository's local git configuration before invoking an external program. Authenticated members who can point the node, including as an agent tool, at a repository whose local configuration they control can execute programs as the n8n process user.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-96218Medium· 5.5Improper access control in Windows Update Stack allows an authorized attacker to perform tampering locally.
CVE-2026-96188High· 7.3External control of system or configuration setting in Microsoft PowerToys allows an authorized attacker to elevate privileges locally.
CVE-2026-73027High· 7.8External control of system or configuration setting in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
CVE-2026-94603Critical· 10.0Podman is a tool for managing OCI containers and pods
CVE-2026-107818High· 8.4MariaDB server is a community developed fork of MySQL server
CVE-2025-62527High· 7.1Taguette is an open source qualitative research tool