n8n @n8n/computer-use Shell Sandbox Not Enforced on Linux/Windows (GHSA-fpg6-x68q-5793)

Vulnerability Overview Vulnerability Name: computer-use Shell Sandbox Not Enforced on Linux and Windows CVE Identifier: GHSA-fpg6-x68q-5793 Severity: Medium (5.5 / 10) Description: In the package, sandbox restrictions are only applied on macOS. On Linux and Windows, shell commands can run without system or network restrictions, allowing unrestricted access to the host file system and insecure n8n instances. Scope Affected Versions: - = 2.30.1 - >= 2.29.8 Impact: This issue only affects deployments where the package is explicitly installed and run. It does not affect standard n8n installations. Remediation Patch: - This issue has been fixed in n8n versions 2.29.8 and 2.30.1. Users should upgrade to these versions or later to remediate the vulnerability. - The fix includes adding sandboxed execution on Linux via , and completely disabling shell tools if a working sandbox cannot be established. - For users who require unsandboxed execution and accept the associated risks, an explicit flag is provided. Temporary Workarounds If immediate upgrading is not possible, administrators should consider the following temporary mitigation measures: - Disable or avoid deploying the package on Linux or Windows hosts until the fix is applied. - Restrict access to n8n instances and the computer user agent to fully trusted users only. Additional Information CVSS v4 Base Metrics: - Attack Vector: Network - Attack Complexity: Low - Attack Requirements: Present - Required Privileges: High - User Interaction: None Vulnerable System Impact Metrics: - Confidentiality: None - Integrity: None - Availability: None Subsequent System Impact Metrics: - Confidentiality: High - Integrity: High - Availability: High Code Blocks No POC code or exploit code available.

Goal Reached Thanks to every supporter — we hit 100%!

n8n @n8n/computer-use Shell Sandbox Not Enforced on Linux/Windows (GHSA-fpg6-x68q-5793)

More from this source