mediumVulnerability

GHSA-4v35-78jc-648r

## Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-fpg6-x68q-5793. This link is maintained to preserve external references. ## Original Description n8n before 2.29.8 and 2.30.x before 2.30.1 does not enforce shell sandbox restrictions on Linux and Windows in the @n8n/computer-use package (sandboxing was applied only on macOS). Shell commands executed by the tool run without any filesystem or network restrictions, allowing unrestricted access to the host filesystem and network from within the computer-use agent process. This issue only affects deployments where the @n8n/computer-use package is explicitly installed and running; standard n8n installations are not affected.

Properties

ghsa_id
GHSA-4v35-78jc-648r
severity
medium
summary
Duplicate Advisory: computer-use Shell Sandbox Not Enforced on Linux and Windows
cve_id
GHSA-4v35-78jc-648r
is_ghsa_only
true
ghsa_published
2026-07-22T12:32:17Z
source_url
https://github.com/advisories/GHSA-4v35-78jc-648r
ghsa_updated
2026-07-22T22:26:31Z

Related Entities (4)

HAS_WEAKNESS (1)

[Weakness]Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

REPORTED_BY (1)

[Source]GitHub Advisory Database

VULNERABLE_TO (1)

[Software]npm/@n8n/computer-use

AFFECTS (1)

[Software]npm/@n8n/computer-use

Explore deeper with Ninja Signal's threat intelligence graph

GHSA-4v35-78jc-648r — Ninja Signal Threat Intelligence | Ninja Signal