CVE-2026-65590

Name of the Vulnerable Software and Affected Versions n8n versions prior to 2.29.8 n8n versions 2.30.x prior to 2.30.1

Description The @n8n/computer-use package fails to enforce shell sandbox restrictions on Linux and Windows, as sandboxing was only applied to macOS. This allows shell commands executed by the tool to run without filesystem or network restrictions, granting unrestricted access to the host filesystem and network from within the computer-use agent process. This issue only affects deployments where the @n8n/computer-use package is explicitly installed and running; standard n8n installations are not affected.

Recommendations Update n8n to version 2.29.8 or later. Update n8n to version 2.30.1 or later. Disable or avoid deploying the @n8n/computer-use package on Linux or Windows hosts. Restrict access to the n8n instance and the computer-use agent to fully trusted users only.