CVE-2026-65590
n8n before 2.30.1 Shell Sandbox Bypass on Linux Windows
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
n8n before 2.29.8 and 2.30.x before 2.30.1 does not enforce shell sandbox restrictions on Linux and Windows in the @n8n/computer-use package (sandboxing was applied only on macOS). Shell commands executed by the tool run without any filesystem or network restrictions, allowing unrestricted access to the host filesystem and network from within the computer-use agent process. This issue only affects deployments where the @n8n/computer-use package is explicitly installed and running; standard n8n installations are not affected.
| CWE | CWE-78 |
| Vendor | n8n-io |
| Product | n8n |
| Published | Jul 22, 2026 |
| Last Updated | Jul 22, 2026 |
Stay Ahead of the Next One
Get instant alerts for n8n-io n8n
Be the first to know when new unknown vulnerabilities affecting n8n-io n8n are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
n8n-io / n8n
0 < 2.30.1
n8n-io / n8n
0 < 2.29.8