GHSA-gf29-4f56-r2jf: n8n: Git Node fetch/pull/pushTags Operations Bypass Sandbox Path Restriction

Authenticated n8n users with workflow create/execute rights could use the Git node’s fetch, pull, or push-tags operations to bypass the repository-path containment checks that already protected clone and push. By pointing an allowlisted remote configuration value at a local path outside the intended sandbox, an attacker could pull an arbitrary local git repository into the workspace and subsequently read its files and history.