CVE-2026-65590 Details
Description
n8n before 2.29.8 and 2.30.x before 2.30.1 does not enforce shell sandbox restrictions on Linux and Windows in the @n8n/computer-use package (sandboxing was applied only on macOS). Shell commands executed by the tool run without any filesystem or network restrictions, allowing unrestricted access to the host filesystem and network from within the computer-use agent process. This issue only affects deployments where the @n8n/computer-use package is explicitly installed and running; standard n8n installations are not affected.
A vulnerability exists in n8n versions prior to 2.29.8 and 2.30.x prior to 2.30.1, where the @n8n/computer-use package fails to enforce shell sandbox restrictions on Linux and Windows. This allows shell commands executed by the tool to run without any filesystem or network limitations, granting unrestricted access to the host's filesystem and network from within the computer-use agent process. The issue only affects deployments where the @n8n/computer-use package is explicitly installed and running; standard n8n installations are not impacted.
Users should upgrade to n8n versions 2.29.8 or 2.30.1 or later. The fix adds sandbox enforcement on Linux using bubblewrap and disables the shell tool entirely when a working sandbox cannot be established. For deployments that require unsandboxed shell access, an explicit opt-out flag is available.
Metrics
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jul 22, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/n8n-io/n8n/security/advisories/GHSA-fpg6-x68q-5793 | [email protected] | MitigationVendor Advisory |
| https://www.vulncheck.com/advisories/n8n-before-shell-sandbox-bypass-on-linux-windows | [email protected] | Third Party Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-78 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| n8n n8n | < 2.29.8 2.30.0 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 27, 2026 | Initial Analysis | [email protected] |
| Jul 22, 2026 | CVE Modified | CISA-ADP |
| Jul 22, 2026 | New CVE Received | [email protected] |