A TOCTOU race condition in n8n’s Git node clone operation allows an authenticated user to bypass path validation by swapping a directory for a symlink after validation but before the clone is executed. The attacker can place a crafted Git repository in the community node directory; when n8n restarts it loads that repository as a custom node and runs arbitrary JavaScript on the server. This results in full remote code execution within the n8n process.

The vulnerability affects the n8n workflow automation platform, specifically versions before 1.123.64, as well as 2.29.8 and 2.30.1. Both self‑hosted and cloud‑hosted deployments of these versions are impacted. The affected vendor is n8n-io and the product is n8n.

The bug carries a CVSS score of 8.9, indicating high severity. The EPSS score of <1% suggests that the probability of exploitation is currently very low, although the vulnerability is not listed in the CISA KEV catalog. Nevertheless, the attack requires an authenticated user with write access to the community node directory. Once authenticated, the attacker can perform the TOCTOU race by replacing a directory with a symlink, inject a malicious repository, and have it loaded as a custom node upon n8n restart, causing arbitrary JavaScript execution on the server.