CVE-2026-65590 in n8n
Summary
by MITRE • 07/22/2026
n8n before 2.29.8 and 2.30.x before 2.30.1 does not enforce shell sandbox restrictions on Linux and Windows in the @n8n/computer-use package (sandboxing was applied only on macOS). Shell commands executed by the tool run without any filesystem or network restrictions, allowing unrestricted access to the host filesystem and network from within the computer-use agent process. This issue only affects deployments where the @n8n/computer-use package is explicitly installed and running; standard n8n installations are not affected.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Analysis
by VulDB Data Team • 07/22/2026
The vulnerability in n8n versions prior to 2.29.8 and 2.30.x before 2.30.1 represents a critical sandbox escape condition within the @n8n/computer-use package that fundamentally undermines the security boundaries designed to isolate automated computer operations. This flaw specifically targets the cross-platform implementation of shell command execution where the intended security model fails to enforce proper restrictions on Linux and Windows systems while maintaining correct behavior on macOS. The core technical issue lies in the incomplete application of sandboxing mechanisms that should prevent unauthorized access to system resources through the computer-use agent process.
The operational impact of this vulnerability is severe as it allows attackers who can influence shell command execution within the computer-use package to gain unrestricted access to the underlying host filesystem and network interfaces. This creates a pathway for arbitrary code execution, data exfiltration, and potential lateral movement within the compromised environment. The vulnerability's scope is limited to deployments where the @n8n/computer-use package is explicitly installed and operational, meaning standard n8n installations without this component remain unaffected. However, for affected environments, the implications extend beyond simple privilege escalation to encompass complete system compromise through unbounded shell command execution.
From a cybersecurity perspective, this vulnerability maps directly to CWE-250 Execution of Code with Unnecessary Privileges and aligns with ATT&CK techniques such as T1059 Command and Scripting Interpreter and T1566 Phishing. The flaw demonstrates poor privilege separation and inadequate sandbox implementation in multi-platform applications where security controls are inconsistently applied across operating systems. Organizations should immediately update to the patched versions 2.29.8 or 2.30.1 to remediate this vulnerability, while also considering additional controls such as network segmentation and process monitoring to mitigate potential exploitation attempts. The incident underscores the importance of consistent security implementation across all supported platforms and highlights the critical nature of sandboxing mechanisms in automated workflow systems that execute potentially untrusted commands against host environments.