CVE-2026-72773: n8n Path Traversal Vulnerability

CVE-2026-72773 Overview

CVE-2026-72773 is a path-confinement bypass in the n8n workflow automation platform. The flaw resides in the @n8n/computer-use file-search tool (search_files) and allows crafted search patterns to escape the configured base directory. An attacker who can influence the tool's search input can enumerate and read arbitrary files accessible to the daemon's operating system user. The issue is classified as a Path Traversal weakness [CWE-22] and affects n8n versions before 2.31.5 and 2.32.x before 2.32.1.

Critical Impact
Attackers can read arbitrary local files, including configuration files, secrets, and credentials readable by the n8n daemon user, leading to sensitive information disclosure.

Affected Products

n8n versions prior to 2.31.5
n8n 2.32.x versions prior to 2.32.1
Deployments exposing the @n8n/computer-usesearch_files tool to untrusted input

Discovery Timeline

2026-08-11 - CVE-2026-72773 published to the National Vulnerability Database (NVD)
2026-08-11 - Last updated in NVD database

Technical Details for CVE-2026-72773

Vulnerability Analysis

The vulnerability exists in the search_files tool provided by the @n8n/computer-use package. The tool is designed to restrict file operations to a configured base directory. However, the confinement check fails to properly normalize or validate crafted search patterns before pattern expansion.

As a result, a malicious pattern can expand to paths outside the intended base directory. The tool then returns file names and file contents from those unintended locations. Any workflow, agent, or upstream component that forwards attacker-controlled data into the tool's search input becomes an exploitation vector.

Root Cause

The root cause is improper limitation of a pathname to a restricted directory [CWE-22]. The base-directory confinement check runs against the raw search pattern rather than against the resolved file paths produced by glob expansion. Patterns containing traversal sequences or absolute path components bypass the guard and match files outside the intended scope.

Attack Vector

Exploitation requires network access and low privileges to submit input to a workflow that invokes the search_files tool. The attacker supplies a crafted search pattern that resolves outside the configured base directory. The tool returns matching file names along with file contents readable by the n8n daemon's OS user. No user interaction is required once the pattern reaches the tool. Disclosed data may include environment files, credential stores, private keys, and other host artifacts that depend on filesystem permissions of the daemon account.

See the GitHub Security Advisory and the VulnCheck Path Traversal Advisory for additional technical details.

Detection Methods for CVE-2026-72773

Indicators of Compromise

Search patterns submitted to search_files containing ../, absolute paths, or unusual glob wildcards such as /**/*
n8n audit or workflow execution logs showing search_files invocations returning files outside the configured base directory
Access log entries showing the n8n process reading sensitive files such as /etc/passwd, .env, id_rsa, or cloud credential files

Detection Strategies

Inspect workflow execution history for calls to the @n8n/computer-usesearch_files tool and correlate resolved file paths against the configured base directory
Monitor the n8n daemon process for file read operations targeting paths outside its expected working directory
Alert on outbound data transfers immediately following search_files invocations that returned large or unexpected result sets

Monitoring Recommendations

Enable verbose logging on n8n workflow tool calls and forward logs to a centralized SIEM for retention and correlation
Baseline normal search_files usage patterns and alert on deviations in query volume, pattern syntax, or result paths
Track file access telemetry from the host running the n8n daemon to detect reads of credential and configuration files

How to Mitigate CVE-2026-72773

Immediate Actions Required

Upgrade n8n to version 2.31.5 or 2.32.1 or later
Audit workflows that expose the @n8n/computer-usesearch_files tool to external or user-controlled input and disable them until patched
Rotate any credentials, API keys, or secrets stored on the host filesystem that were readable by the n8n daemon user

Patch Information

The maintainers released fixes in n8n 2.31.5 and 2.32.1. Refer to the GitHub Security Advisory GHSA-pf2q-pxhf-hgmw for the authoritative patch details and release notes.

Workarounds

Restrict the OS user running the n8n daemon to a minimal filesystem scope using dedicated user accounts and directory permissions
Run n8n inside a container or chroot with only the required directories mounted to limit blast radius of file disclosure
Sanitize or reject workflow inputs that contain path traversal sequences, absolute paths, or unbounded glob wildcards before they reach tool invocations

bash

# Configuration example: upgrade n8n via npm
npm install -g n8n@2.32.1

# Or upgrade Docker deployments
docker pull n8nio/n8n:2.32.1
docker stop n8n && docker rm n8n
docker run -d --name n8n \
  --user node \
  -v /opt/n8n/data:/home/node/.n8n \
  -p 5678:5678 \
  n8nio/n8n:2.32.1