CVE-2026-72773 n8n-io CVE debrief

Who should care

Deployments using n8n versions before 2.31.5 and 2.32.x before 2.32.1, particularly those where an actor can influence the tool's search input, should review and apply patches or mitigations. Operators, platform administrators, vulnerability management teams, and security teams should assess potential impact and prioritize defensive actions based on system configurations and exposure levels.

Technical summary

The @n8n/computer-use file-search (search_files) tool in n8n before 2.31.5 and 2.32.x before 2.32.1 contains a path-confinement bypass vulnerability. A crafted search pattern can bypass the base-directory confinement check, allowing the tool to return names and contents of arbitrary local files readable by the daemon's OS user. This vulnerability affects deployments where an actor can influence the tool's search input, potentially leading to unauthorized file access.

Defensive priority

Medium-priority defensive review recommended due to potential path-confinement bypass vulnerability in n8n file-search tool.

Recommended defensive actions

• Review and apply vendor-provided patches for n8n versions before 2.31.5 and 2.32.x before 2.32.1
• Restrict input to the file-search tool to prevent crafted search patterns
• Monitor file-search tool usage for suspicious activity
• Consider implementing compensating controls for affected deployments
• Perform a thorough review of system configurations to identify potential exposure
• Verify that monitoring and detection systems are in place to detect suspicious activity
• Review change management processes to ensure timely application of security updates

Evidence notes

Evidence from official CVE Program record and NIST NVD detail page indicates path-confinement bypass vulnerability in n8n before 2.31.5 and 2.32.x before 2.32.1. Limited source detail available; further review required to assess affected scope, potential impact, and defensive priorities. Defenders should verify system configurations, monitor file-search tool usage, and review compensating controls.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.