Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

n8n: Unrestricted Access to Host Filesystem and Network on Linux and Windows

published 3 months ago

Summary

If you're using an older version of n8n on Linux or Windows, an attacker could access your host's files and network. This only affects specific installations of n8n. Update to the latest version to fix the issue.

What to do

Update n8n computer-use to version 2.29.8 or later.

Affected software

Ecosystem	Vendor	Product	Affected versions
npm	n8n	computer-use	< 2.29.8

Original advisory text

Duplicate Advisory: computer-use Shell Sandbox Not Enforced on Linux and Windows

## Duplicate Advisory

This advisory has been withdrawn because it is a duplicate of GHSA-fpg6-x68q-5793. This link is maintained to preserve external references.

## Original Description

n8n before 2.29.8 and 2.30.x before 2.30.1 does not enforce shell sandbox restrictions on Linux and Windows in the @n8n/computer-use package (sandboxing was applied only on macOS). Shell commands executed by the tool run without any filesystem or network restrictions, allowing unrestricted access to the host filesystem and network from within the computer-use agent process. This issue only affects deployments where the @n8n/computer-use package is explicitly installed and running; standard n8n installations are not affected.

References

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker partial control (estimated)

Severity

5.5 Medium

Type

CWE-78OS Command Injection

Timeline

Published22 Jul 2026

Updated22 Jul 2026

First seen22 Jul 2026

Sources

GHSA-4v35-78jc-648r · GHSA

Track software like this

Free during beta