---
id: CVE-2026-72773
title: n8n before 2.32.1 Path Traversal via computer-use search_files
summary: >-
  n8n before 2.31.5 and 2.32.x before 2.32.1 contain a path-confinement bypass
  in the @n8n/computer-use file-search (search_files) tool. A crafted search
  pattern can bypass the base-directory confinement check and expand to
  locations outsi…
severity: medium
cvss: 4.9
cvssVector: 'CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N'
cvssSource: cna
cwe:
  - CWE-22
vendor: n8n-io
product: n8n
affected:
  - n8n >= 2.32.0 < 2.32.1
  - n8n < 2.31.5
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-08-11T18:03:48.156089Z'
published: '2026-08-11'
updated: '2026-10-29'
sourceUpdated: '2026-10-29T21:16:45.843Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-72773'
references:
  - url: 'https://github.com/n8n-io/n8n/security/advisories/GHSA-pf2q-pxhf-hgmw'
    label: GitHub Security Advisory (GHSA-pf2q-pxhf-hgmw)
  - url: >-
      https://www.vulncheck.com/advisories/n8n-before-path-traversal-via-computer-use-search-files
    label: >-
      VulnCheck Advisory: n8n before 2.32.1 Path Traversal via computer-use
      search_files
tags:
  - cve.org
epss: 0.00568
epssPercentile: 0.47182
ingestedAt: '2026-11-03T08:39:35.594Z'
---

## Overview

n8n before 2.31.5 and 2.32.x before 2.32.1 contain a path-confinement bypass in the @n8n/computer-use file-search (search_files) tool. A crafted search pattern can bypass the base-directory confinement check and expand to locations outside the configured directory, causing the tool to return the names and contents of arbitrary local files readable by the daemon's OS user. Any deployment where an actor can influence the tool's search input is affected.

## Affected

- `n8n >= 2.32.0 < 2.32.1`
- `n8n < 2.31.5`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.