n8n: Authenticated code execution in the n8n Git node
## Impact Authenticated n8n users with rights to create and execute workflows could achieve code execution on the n8n h
#cwe-78
共收录 1628 条相关情报。
← 返回所有主题danger danger-js CLI localGetFileAtSHA.ts danger.git.diffForFile os command injection
CVE-2026-16629
A vulnerability was identified in danger danger-js up to 13.0.7. Impacted is the function danger.git.diffForFile of the
oclif JIT Plugin Entry child_process.exec os command injection
CVE-2026-16628
A vulnerability was detected in oclif up to 4.23.16. Affected by this vulnerability is the function child_process.exec o
When importing connections in Compass it is possible to override some connection options that are otherwise can't be changed via connection form. In particular it is possible to...
CVE-2026-14881
When importing connections in Compass it is possible to override some connection options that are otherwise can't be cha
A flaw was found in the Visual Studio Code Ansible Lightspeed extension. This command injection vulnerability (CWE-78) arises from improper handling of the ansible.executionEnvi...
CVE-2026-44191
A flaw was found in the Visual Studio Code Ansible Lightspeed extension. This command injection vulnerability (CWE-78) a
n8n before 2.29.8 and 2.30.x before 2.30.1 does not enforce shell sandbox restrictions on Linux and Windows in the @n8n/computer-use package (sandboxing was applied only on macO...
CVE-2026-65590
n8n before 2.29.8 and 2.30.x before 2.30.1 does not enforce shell sandbox restrictions on Linux and Windows in the @n8n/
A flaw was found in the Ansible Lightspeed Visual Studio Code extension. This Command Injection vulnerability (CWE-78) allows a remote attacker to execute unauthorized commands ...
CVE-2026-44190
A flaw was found in the Ansible Lightspeed Visual Studio Code extension. This Command Injection vulnerability (CWE-78) a
n8n before 2.30.1 Shell Sandbox Bypass on Linux Windows
CVE-2026-65590
n8n before 2.29.8 and 2.30.x before 2.30.1 does not enforce shell sandbox restrictions on Linux and Windows in the @n8n/
Supermicro (SMC) SMASH services contain an Arbitrary code execution issue in X14DBG-DAP and X14DBI. An authorized attacker can exploit SMASH’s input capability to compromise dat...
CVE-2026-3821
Supermicro (SMC) SMASH services contain an Arbitrary code execution issue in X14DBG-DAP and X14DBI. An authorized attack
A weakness has been identified in umijs umi up to 4.6.63. The affected element is the function git.getFileCreateInfo of the file packages/utils/src/getFileGitIno.ts of the compo...
CVE-2026-16492
A weakness has been identified in umijs umi up to 4.6.63. The affected element is the function git.getFileCreateInfo of
umijs umi GIT File Helper getFileGitIno.ts git.getFileCreateInfo os command injection
CVE-2026-16492
A weakness has been identified in umijs umi up to 4.6.63. The affected element is the function git.getFileCreateInfo of
Autel Maxi Charger Single firmware through V1.03.51 is vulnerable to OS command injection when...
CVE-2026-8986
Autel Maxi Charger Single firmware through V1.03.51 is vulnerable to OS command injection when processing OCPP GetDiagno
Autel Maxi Charger Single firmware through V1.03.51 is vulnerable to OS command injection in the ...
CVE-2026-8985
Autel Maxi Charger Single firmware through V1.03.51 is vulnerable to OS command injection in the /test endpoint exposed
A vulnerability was identified in jsforce up to 3.10.16. This issue affects the function _execCommand in the library lib/registry/sfdx.js of the component SFDX Connection Regist...
CVE-2026-16489
A vulnerability was identified in jsforce up to 3.10.16. This issue affects the function _execCommand in the library lib
A vulnerability was determined in QUSETIONS MiniCode-Python 0.1.0. This vulnerability affects the function subprocess.Popen of the file minicode/config.py of the component Proje...
CVE-2026-16488
A vulnerability was determined in QUSETIONS MiniCode-Python 0.1.0. This vulnerability affects the function subprocess.Po
jsforce SFDX Connection Registry sfdx.js _execCommand os command injection
CVE-2026-16489
A vulnerability was identified in jsforce up to 3.10.16. This issue affects the function _execCommand in the library lib
QUSETIONS MiniCode-Python Project File config.py subprocess.Popen os command injection
CVE-2026-16488
A vulnerability was determined in QUSETIONS MiniCode-Python 0.1.0. This vulnerability affects the function subprocess.Po
Autel Maxi Charger Single firmware through V1.03.51 is vulnerable to OS command injection when processing OCPP GetDiagnostics requests. A malicious or compromised OCPP server ca...
CVE-2026-8986
Autel Maxi Charger Single firmware through V1.03.51 is vulnerable to OS command injection when processing OCPP GetDiagno
Autel Maxi Charger Single firmware through V1.03.51 is vulnerable to OS command injection in the /test endpoint exposed on TCP port 9002. An unauthenticated attacker can supply ...
CVE-2026-8985
Autel Maxi Charger Single firmware through V1.03.51 is vulnerable to OS command injection in the /test endpoint exposed
The audit file upload handler does not sanitize filenames, allowing shell metacharacters to flow into system command execution. This input validation failure enables command inj...
CVE-2026-64881
The audit file upload handler does not sanitize filenames, allowing shell metacharacters to flow into system command exe