n8n versions prior to 1.123.64, 2.29.8, and 2.30.1 contain a TOCTOU race condition in the Git node's clone operation. The vulnerability allows authenticated users to bypass path restrictions by swapping a directory for a symlink after path validation but before the clone operation executes. This can lead to planting a malicious repository in the community node directory, which n8n loads as a custom node upon restart, resulting in arbitrary JavaScript code execution on the server. Both self-hosted and cloud deployments are impacted. The advisory is a duplicate and withdrawn, referencing GHSA-g3r5-9h93-4j2c for the original report.

Exploitation of this vulnerability allows authenticated users to achieve remote code execution on the n8n server by planting malicious code that is executed on service restart. This compromises the integrity and security of the affected system, potentially allowing full control by an attacker. Both self-hosted and cloud instances are vulnerable, though no known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory GHSA-g3r5-9h93-4j2c for current remediation guidance. Since this advisory is a duplicate and withdrawn, refer to the original advisory for official fixes or mitigations. Until patched, restrict authenticated user permissions to limit exposure and avoid restarting n8n instances after suspicious activity.