n8n’s Git node allowed an authenticated user with the ability to create or modify workflows to specify a local filesystem path as the source during clone or target during push. This bypassed the N8N_RESTRICT_FILE_ACCESS_TO sandbox, enabling the service to read the contents of any local git repository accessible to the n8n process. The vulnerability could expose arbitrary files on the host, including configuration or secrets, and is classified as a directory traversal flaw (CWE-22).

The issue affects n8n installations running versions prior to 1.123.48, 2.21.8, or 2.22.4 released by n8n‑io.

The CVSS score of 6 indicates medium severity, and the EPSS score is not available, suggesting no known high exploitation probability. The vulnerability is not listed in CISA’s KEV catalog. An attacker must first obtain authenticated access with workflow‑creation privileges, after which they can craft a workflow to read sensitive files via the Git node, potentially exfiltrating the data. The risk is therefore moderate and limited to the scope of the n8n host environment.