EUVD-2026-56099

n8n before 2.31.5 and 2.32.x before 2.32.1 contain a path-confinement bypass in the @n8n/computer-use file-search searchfiles tool. A crafted search pattern can bypass the base-directory confinement check and expand to locations outside the configured directory, causing the tool to return the nam...

Sandbox Bypass

n8n @n8n/computer-use is vulnerable to Sandbox Escape. The vulnerability is due to missing shell sandbox enforcement on Linux and Windows, allowing computer-use agents to execute unrestricted shell commands with access to the host filesystem and network...

PT-2026-67365

Impact The component @n8n/computer-use file-search tool confined searches to a configured base directory. A crafted search pattern could bypass the confinement check and expand to locations outside that directory, causing the tool to return the names and contents of files anywhere the daemon's OS...

CVE-2026-65590: Improper Neutralization of Special Elements used in an OS Command

n8n before 2.29.8 and 2.30.x before 2.30.1 does not enforce shell sandbox restrictions on Linux and Windows in the @n8n/computer-use package sandboxing was applied only on macOS. Shell commands executed by the tool run without any filesystem or network restrictions, allowing unrestricted access t...

@n8n/computer-use (0.10.0) potentially affected by CVE-2026-54309 via @n8n/mcp-browser (0.9.0)

@n8n/mcp-browser NPM version 0.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on @n8n/mcp-browser and may be impacted: - @n8n/computer-use 0.10.0 Source cves: CVE-2026-54309 Source advisory: SNYK:JS-N8NMCPBROWSER-17753475...