Exploitation ongoing with high activity in latest observed window (1 mentions)
Immediate actions
Prioritize remediation for affected systems immediately
Assume compromise if assets are exposed
Track advisory updates for patch or workaround availability
Recommended action window: Immediate (within 24h)
NVD description
n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the Git node clone operation matched an attacker-controlled destination path against the default N8N_BLOCK_FILE_PATTERNS regular expression. The pattern ^(./).git(/.)$ allowed catastrophic backtracking and ran synchronously in the main n8n process. An authenticated workflow editor could therefore freeze the instance with one workflow execution; the affected default is declared in packages/@n8n/config/src/configs/security.config.ts. This issue is fixed in versions 1.123.76, 2.37.7 and 2.38.2.
The post announces a high‑severity Regular Expression Denial of Service vulnerability in n8n (CVE‑2026‑86081) and links to a dailyCVE summary page, but it does not provide a PoC, exploit code, evidence of active exploitation, or patch information.
NewNormal Security turns the last 24 hours of CVEs into new detections, every day.
𝗗𝗮𝗶𝗹𝘆 𝗖𝗩𝗘 𝗥𝗲𝗽𝗼𝗿𝘁 — 9 Sep 2026
𝗔𝗱𝗱𝗲𝗱 𝘁𝗼 𝗡𝗲𝘄𝗦𝗰𝗮𝗻 𝘁𝗼𝗱𝗮𝘆:
🚨 Actively exploited pre-authentication RCE — exposed N-central servers now surface the advisory before attackers take the RMM and managed endpoints (N-able CVE-2026-86218)
📦 Regular-expression denial of service — crafted commit author metadata can exhaust apps pinned to vulnerable GitPython builds (GitPython CVE-2026-87819)
📦 Regular-expression denial of service — attacker-controlled Git clone paths can exhaust vulnerable n8n workers (n8n CVE-2026-86081)
Test your stack with NewScan — free, self-hosted:
https://newnormalsecurity.com/newscan?utm_source=x&utm_medium=social&utm_campaign=daily-cve
#infosec#AppSec#RCE#CSO#REDTEAM
Post summary
The daily CVE report highlights several recent vulnerabilities, including an actively exploited pre‑authentication RCE in N‑central servers (CVE‑2026‑86218) and regex‑based DoS in GitPython and n8n, with no patches or PoC details disclosed.
