CVE-2026-27498
1 advisory.
npm/n8n CVE-2026-27498: high 8.5
n8n has Arbitrary Command Execution via File Write and Git Operations
Action: Upgrade n8n to 1.123.8 or later.
npm i n8n@1.123.8npm i n8n@2.2.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.123.8 | - |
| 2.0.0 | 2.2.0 | - |
Fixed versions
| 1.123.8 | 2.2.0 |
Sources
- osv: GHSA-x2mw-7j39-93xq
- https://github.com/n8n-io/n8n/security/advisories/GHSA-x2mw-7j39-93xq
- https://nvd.nist.gov/vuln/detail/CVE-2026-27498
- https://github.com/n8n-io/n8n/commit/97365caf253978ba8e46d7bc53fa7ac3b6f67b32
- https://github.com/n8n-io/n8n/commit/e22acaab3dcb2004e5fe0bf9ef2db975bde61866
- https://github.com/n8n-io/n8n
- https://github.com/n8n-io/n8n/releases/tag/n8n@1.123.8
- https://github.com/n8n-io/n8n/releases/tag/n8n@2.2.0
CVE-2026-27498 · published · modified · JSON