CVE-2026-65590 n8n-io CVE debrief

Who should care

Users and administrators of n8n workflow automation tool, especially those with deployments on Linux and Windows systems where the @n8n/computer-use package is installed and running, should review their environments for potential exposure. This includes reviewing current versions, identifying affected deployments, and planning for updates or mitigations. Security teams and vulnerability management teams should prioritize this vulnerability due to its potential impact on host filesystem and network security.

Technical summary

The @n8n/computer-use package in n8n versions before 2.29.8 and 2.30.x before 2.30.1 does not enforce shell sandbox restrictions on Linux and Windows systems. This allows shell commands executed by the tool to run without filesystem or network restrictions, providing unrestricted access to the host filesystem and network from within the computer-use agent process. The vulnerability affects deployments where the @n8n/computer-use package is explicitly installed and running, while standard n8n installations remain unaffected due to the default security configurations.

Defensive priority

High priority for users of affected n8n deployments, especially in environments where the @n8n/computer-use package is used, due to the potential for unrestricted access to host resources.

Recommended defensive actions

• Update to n8n version 2.29.8 or later, or 2.30.1 or later.
• Review and restrict usage of the @n8n/computer-use package.
• Implement compensating controls, such as monitoring and network segmentation.
• Verify and limit access to sensitive host resources.
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance.
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed.

Evidence notes

The CVE record was published on 2026-07-22T12:18:18.987Z and was last modified on 2026-07-22T16:27:18.220Z. The NVD entry is currently Undergoing Analysis. References include GitHub security advisory GHSA-fpg6-x68q-5793 and Vulncheck advisory. The vulnerability was reported by a researcher and verified by the vendor. The issue is specific to deployments where the @n8n/computer-use package is explicitly installed.

Official resources