CVE-2026-72770 is a path traversal vulnerability affecting n8n versions before 1.123.67. The issue exists in the Git node's fetch, pull, and push-tags operations, where authenticated users with workflow create/execute rights can circumvent repository-path containment restrictions. This allows them to specify allowlisted remote configurations that point to local filesystem paths outside the sandbox, enabling unauthorized access to arbitrary git repositories and their contents.

An attacker with authenticated workflow create or execute permissions can exploit this vulnerability to read arbitrary files and git repository histories on the local system by bypassing path containment checks. This could lead to unauthorized disclosure of sensitive information stored in local git repositories accessible to the n8n application.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict workflow creation and execution permissions to trusted users only to reduce risk.