CVE-2026-33724: n8n's Source Control SSH Configuration Uses StrictHostKeyChecking=no

When the Source Control feature is configured to use SSH, the SSH command used for git operations explicitly disabled host key verification. A network attacker positioned between the n8n instance and the remote Git server could intercept the connection and present a fraudulent host key, potentially injecting malicious content into workflows or intercepting repository data.

• This issue only affects instances where the Source Control feature has been explicitly enabled and configured to use SSH (non-default).