Executive brief
n8n is a workflow automation tool that allows users to connect different applications. A security issue was identified in an optional component called 'computer-use' which failed to properly restrict shell commands on Linux and Windows systems. If this component is installed, an authorized user could bypass intended security boundaries to access the host's files and network, potentially leading to full system compromise. Standard installations of n8n that do not use this specific package are not affected.
Technical details
The @n8n/computer-use package in n8n versions prior to 2.29.8 and 2.30.1 failed to implement sandboxing for shell commands on Linux and Windows platforms, as the restriction was only active on macOS. This vulnerability is classified as a sandbox escape or OS command injection (CWE-78) context where commands executed by the agent process run with the full privileges of the host process. An attacker with high privileges (sufficient to trigger the shell tool) can gain unrestricted access to the host's filesystem and network. The fix introduces bubblewrap-based sandboxing on Linux and disables the tool if a secure environment cannot be established. Standard n8n deployments are unaffected unless this specific package is manually installed.
Affected products
- n8n-io n8n < 2.29.8, 2.30.x < 2.30.1
- n8n-io @n8n/computer-use < 2.29.8
Timeline
- 2026-07-08: advisory: Original advisory GHSA-fpg6-x68q-5793 published
- 2026-07-22: advisory: Duplicate advisory GHSA-4v35-78jc-648r published and withdrawn
- 2026-07-22: patched: Fixes confirmed in versions 2.29.8 and 2.30.1