Description
n8n before 2.31.5 and 2.32.x before 2.32.1 contain a path-confinement bypass in the @n8n/computer-use file-search (search_files) tool. A crafted search pattern can bypass the base-directory confinement check and expand to locations outside the configured directory, causing the tool to return the names and contents of arbitrary local files readable by the daemon's OS user. Any deployment where an actor can influence the tool's search input is affected.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| n8n-io | n8n | 2.32.0 – < 2.32.1, < 2.31.5 | 2.32.1 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | n8n | >= 2.32.0, < 2.32.1 | 2.32.1 | GHSA-pf2q-pxhf-hgmw |
| npm | n8n | < 2.31.5 | 2.31.5 | GHSA-pf2q-pxhf-hgmw |
Advisories 1
- WID-SEC-2026-2489 n8n: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 11, 2026
References
- GitHub Security Advisory (GHSA-pf2q-pxhf-hgmw) vendor-advisory
- VulnCheck Advisory: n8n before 2.32.1 Path Traversal via computer-use search_files third-party-advisory