docs: Add security warning for Execute Command node (#3665)

Co-authored-by: Justin Ellingwood <justin@n8n.io>
This commit is contained in:
Cornelius Suermann 2025-09-16 10:55:22 +02:00 committed by GitHub
parent b3265f8697
commit 2c90bed65c
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
2 changed files with 5 additions and 0 deletions

View File

@ -9,6 +9,10 @@ priority: high
The Execute Command node runs shell commands on the host machine that runs n8n. The Execute Command node runs shell commands on the host machine that runs n8n.
/// warning | Security considerations
The Execute Command node can introduce significant security risks in environments that operate with untrusted users. Because of this, n8n recommends [disabling](/hosting/securing/blocking-nodes.md#exclude-nodes) it in such setups.
///
/// note | Which shell runs the command? /// note | Which shell runs the command?
This node executes the command in the default shell of the host machine. For example, `cmd` on Windows and `zsh` on macOS. This node executes the command in the default shell of the host machine. For example, `cmd` on Windows and `zsh` on macOS.

View File

@ -263,6 +263,7 @@ Typeform
[Uu]npublish [Uu]npublish
[Uu]nshare [Uu]nshare
Untrash Untrash
[Uu]ntrusted
UpLead UpLead
uProc uProc
[Uu]psert [Uu]psert