CVE-2026-72773

n8n before 2.31.5 and 2.32.x before 2.32.1 contain a path-confinement bypass in the @n8n/computer-use file-search searchfiles tool. A crafted search pattern can bypass the base-directory confinement check and expand to locations outside the configured directory, causing the tool to return the nam...

CVE-2026-72773

CVE-2026-72773 affects n8n versions before 2.31.5 and 2.32.x before 2.32.1, due to a path-confinement bypass in the @n8n/computer-use file-search (search_files) tool. A crafted search pattern can bypass the base-directory confinement, expanding to locations outside the configured directory and re...