AI Sec Watch: A Security Intelligence Platform for AI Systems

Luu, T.J.

GHSA-fpg6-x68q-5793: n8n: computer-use Shell Sandbox Not Enforced on Linux and Windows

mediumvulnerability

security

Source: GitHub Advisory DatabaseJuly 22, 2026CVE-2026-65590

Summary

The shell tool in n8n's computer-use package failed to enforce sandbox restrictions (security boundaries that limit what a program can access) on Linux and Windows, allowing shell commands to run without limits on filesystem and network access. This vulnerability only affects deployments that explicitly install the computer-use package, not standard n8n installations. An attacker with access to the system could potentially read files, modify data, or communicate over the network from within the agent process.

Solution / Mitigation

The issue has been fixed in n8n versions 2.29.8 and 2.30.1. Users should upgrade to one of these versions or later. The fix adds sandbox enforcement on Linux via bubblewrap and disables the shell tool entirely when a working sandbox cannot be established. An explicit opt-out flag (`--dangerously-disable-shell-sandbox`) is available for deployments that require unsandboxed shell access. As temporary workarounds if upgrading is not immediately possible, administrators should disable or avoid deploying the computer-use package on Linux or Windows hosts, and restrict access to the n8n instance to fully trusted users only.