CVE-2026-86081

    Dashboard / Vulnerabilities / CVE-2026-86081

    CVE-2026-86081

    Published: 8 Sept 2026Last Modified: 11 Sept 2026

    Summary: n8n: Regular Expression Denial of Service in the Default Blocked-File-Pattern Match via a Git Node Clone Path

    Details: n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the Git node clone operation matched an attacker-controlled destination path against the default N8N_BLOCK_FILE_PATTERNS regular expression. The pattern ^(./).git(/.)$ allowed catastrophic backtracking and ran synchronously in the main n8n process. An authenticated workflow editor could therefore freeze the instance with one workflow execution; the affected default is declared in packages/@n8n/config/src/configs/security.config.ts. This issue is fixed in versions 1.123.76, 2.37.7 and 2.38.2.

    References: https://github.com/n8n-io/n8n/releases/tag/[email protected], https://github.com/n8n-io/n8n/releases/tag/[email protected], https://github.com/n8n-io/n8n/releases/tag/[email protected], https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/86xxx/CVE-2026-86081.json, https://github.com/n8n-io/n8n/security/advisories/GHSA-j535-v25q-vx3q, https://nvd.nist.gov/vuln/detail/CVE-2026-86081

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- ee7aca5845c9db2188150591eceebe20c1314643
    Fixed -7bd63f41c2f1f2bc2576c0728dbe2e68ed61e0f1

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2026-86081 | CVE-DB