9

CVSS Score

4.0

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2026-27498

CVE-2026-27498: n8n has Arbitrary Command Execution via File Write and Git Operations

n8n is an open source workflow automation platform. Prior to versions 2.2.0 and 1.123.8, an authenticated user with permission to create or modify workflows could chain the Read/Write Files from Disk node with git operations to achieve remote code execution. By writing to specific configuration files and then triggering a git operation, the attacker could execute arbitrary shell commands on the n8n host. The issue has been fixed in n8n versions 2.2.0 and 1.123.8. Users should upgrade to one of these versions or later to remediate the vulnerability. If upgrading is not immediately possible, administrators should consider the following temporary mitigations. Limit workflow creation and editing permissions to fully trusted users only, and/or disable the Read/Write Files from Disk node by adding n8n-nodes-base.readWriteFile to the NODES_EXCLUDE environment variable. These workarounds do not fully remediate the risk and should only be used as short-term mitigation measures.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2026-27498

CVE-2026-27498:

9

CVSS Score

4.0

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
n8n	npm	< 1.123.8	1.123.8
n8n	npm	>= 2.0.0, < 2.2.0	2.2.0

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability allows an authenticated user with workflow permissions to achieve remote code execution. This is done by chaining the 'Read/Write Files from Disk' node with git operations. The root cause of the vulnerability is the ability to write files into sensitive locations, specifically within .git directories.

The provided patches address this issue by introducing a file path blocking mechanism based on regular expressions. The main change is in the packages/core/src/execution-engine/node-execution-context/utils/file-system-helper-functions.ts file.

A new function, isFilePatternBlocked, is introduced, which checks a given file path against a list of configurable regex patterns. By default, this is configured to block access to .git directories.

The core of the vulnerability lies in the isFilePathBlocked function, which was modified to incorporate this new check. Before the patch, isFilePathBlocked did not have this capability, thus permitting file write operations into .git directories. Any file operation function, such as writeFile used by the 'Read/Write Files from Disk' node, would call isFilePathBlocked. An attacker could specify a path to a git hook (e.g., .git/hooks/pre-commit), and isFilePathBlocked would incorrectly approve it, leading to the file being written and subsequent code execution when a git operation is triggered.

Vulnerable functions

isFilePathBlocked

packages/core/src/execution-engine/node-execution-context/utils/file-system-helper-functions.ts

This function is responsible for checking if a file path is allowed for file operations. Prior to the patch, it lacked a mechanism to block access based on file path patterns. The vulnerability existed because this function would return `false` for paths inside a `.git` directory, allowing nodes like 'Read/Write Files from Disk' to write malicious files (e.g., git hooks) that could be executed later. The patch introduces a call to `isFilePatternBlocked` to prevent access to sensitive paths like those within `.git` directories.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.