The vulnerability is a path‑confinement bypass in the @n8n/computer-use file‑search tool, allowing crafted search patterns to read files outside the intended directory. This flaw enables local file disclosure, potentially exposing configuration files, executable binaries, or other sensitive data. The weakness is identified as CWE‑22 and can compromise confidentiality if an attacker has any ability to influence the search input. The exploit does not require elevated privileges beyond those of the n8n daemon’s OS user, but it can still reveal valuable information about the system.

Affected product is n8n by n8n‑io. Versions prior to 2.32.1, including 2.31.5 and all 2.32.x releases before 2.32.1, contain the vulnerable @n8n/computer‑use package. The issue resides in the workflow engine’s search_files node used for locating local files during workflow execution.

The CVSS score of 4.9 indicates moderate severity. EPSS data is unavailable and the vulnerability is not listed in CISA KEV, suggesting no widespread exploitation yet. Based on the description, the likely attack vector is through untrusted input to the file‑search function, which can be provided by users or external systems that can create or modify workflows. If an attacker can supply a crafted search string, they can read any file the daemon can access, leading to confidentiality compromise. The exploit requires no additional infrastructure beyond the ability to submit or invoke the file‑search node. Occurrence of the vulnerability could be mitigated by restricting who can construct that input or by disabling the node altogether.