CVE-2026-72773

n8n before 2.31.5 and 2.32.x before 2.32.1 contain a path-confinement bypass in the @n8n/computer-use file-search searchfiles tool. A crafted search pattern can bypass the base-directory confinement check and expand to locations outside the configured directory, causing the tool to return the nam...

CVE-2026-72773

n8n versions before 2.31.5 and 2.32.x before 2.32.1 contain a path-confinement bypass in the @n8n/computer-use search_files tool. A crafted search pattern can escape the configured base-directory check, allowing an attacker who can influence the tool's input to read names and contents of arbitrar...