CVE-2026-72773

Name of the Vulnerable Software and Affected Versions n8n versions prior to 2.31.5 n8n versions 2.32.x prior to 2.32.1

Description A path-confinement bypass exists in the @n8n/computer-use file-search tool. By using a crafted search pattern in the search files() function, an attacker can bypass the base-directory confinement check. This allows the tool to access and return the names and contents of arbitrary local files that are readable by the daemon's OS user. This issue affects any deployment where a user can influence the search input.

Recommendations Update n8n to version 2.31.5 or later. Update n8n to version 2.32.1 or later.