{"id":"CVE-2026-86081","aliases":[],"url":"https://o3.security/vulnerability/CVE-2026-86081","summary":"n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the Git node clone operation matched an attacker-controlled destination path against the default…","details":"n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the Git node clone operation matched an attacker-controlled destination path against the default N8N_BLOCK_FILE_PATTERNS regular expression. The pattern ^(./).git(/.)$ allowed catastrophic backtracking and ran synchronously in the main n8n process. An authenticated workflow editor could therefore freeze the instance with one workflow execution; the affected default is declared in packages/@n8n/config/src/configs/security.config.ts. This issue is fixed in versions 1.123.76, 2.37.7 and 2.38.2.","published":"2026-09-08T22:19:17.093","modified":"2026-09-08T22:19:17.093","cvss":null,"epss":null,"cisaKev":null,"exploitsKnown":null,"affectedPackages":[],"fix":null,"references":[{"type":"WEB","url":"https://github.com/n8n-io/n8n/releases/tag/n8n@1.123.76"},{"type":"WEB","url":"https://github.com/n8n-io/n8n/releases/tag/n8n@2.37.7"},{"type":"WEB","url":"https://github.com/n8n-io/n8n/releases/tag/n8n@2.38.2"},{"type":"WEB","url":"https://github.com/n8n-io/n8n/security/advisories/GHSA-j535-v25q-vx3q"}],"provenance":{"sources":["OSV.dev","NVD","FIRST.org (EPSS)"],"lastVerified":"2026-09-08T22:19:17.093"}}