CVE-2026-72773
Received Received - Intake

Path Confinement Bypass in n8n File Search Tool

Publication date: 2026-08-11

Last updated on: 2026-08-11

Assigner: VulnCheck

Description
n8n before 2.31.5 and 2.32.x before 2.32.1 contain a path-confinement bypass in the @n8n/computer-use file-search (search_files) tool. A crafted search pattern can bypass the base-directory confinement check and expand to locations outside the configured directory, causing the tool to return the names and contents of arbitrary local files readable by the daemon's OS user. Any deployment where an actor can influence the tool's search input is affected.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-11
Last Modified
2026-08-11
Generated
2026-08-11
AI Q&A
2026-08-11
EPSS Evaluated
N/A
NVD
CVE-2026-72773
EUVD
EUVD-2026-56099

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
n8n n8n From 2.32.0 (inc) to 2.32.1 (exc)
n8n n8n to 2.31.5|end_excluding=2.32.1 (exc)
n8n n8n From 2.31.5|end_including=2.32.1 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-22 The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a path-confinement bypass in the n8n workflow automation tool's @n8n/computer-use file-search tool. It allows attackers to craft search patterns that bypass directory restrictions, accessing files outside the intended directory. The flaw affects versions before 2.31.5 and 2.32.1, enabling disclosure of arbitrary local files readable by the daemon's OS user.

Detection Guidance

Check n8n version with: n8n --version. If running versions before 2.31.5 or 2.32.1, the system is vulnerable. Inspect workflows using the @n8n/computer-use search_files tool for untrusted input handling.

Impact Analysis

If you use n8n versions prior to 2.31.5 or 2.32.1, an attacker with access to influence the search input could read sensitive files on the system where n8n runs. This could lead to data leaks, unauthorized access to configuration files, or exposure of other confidential information.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating compliance requirements such as GDPR (data protection) or HIPAA (health information privacy). Organizations using affected n8n versions may face regulatory penalties, reputational damage, and increased audit scrutiny due to potential data breaches.

Mitigation Strategies

Upgrade n8n to version 2.31.5 or 2.32.1 immediately. Restrict instance access, disable AI agent workflows, and run n8n under a low-privilege user account until patched.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-72773. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart