https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T16:11:06.978228+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-351208 EUVD-2026-351208 2026-10-03T16:11:07.025463+00:00 EUVD-2026-351208 https://cve.radiocsirt.org/vuln/fkie_cve-2026-72773 fkie_cve-2026-72773 2026-10-03T16:11:07.025498+00:00

n8n before 2.31.5 and 2.32.x before 2.32.1 contain a path-confinement bypass in the @n8n/computer-use file-search (search_files) tool. A crafted search pattern can bypass the base-directory confinement check and expand to locations outside the configured directory, causing the tool to return the names and contents of arbitrary local files readable by the daemon's OS user. Any deployment where an actor can influence the tool's search input is affected.

 https://cve.radiocsirt.org/vuln/ghsa-cgh8-xfc3-8rm5 GHSA-cgh8-xfc3-8rm5 2026-10-03T16:11:07.025533+00:00

n8n before 2.31.5 and 2.32.x before 2.32.1 contain a path-confinement bypass in the @n8n/computer-use file-search (search_files) tool. A crafted search pattern can bypass the base-directory confinement check and expand to locations outside the configured directory, causing the tool to return the names and contents of arbitrary local files readable by the daemon's OS user. Any deployment where an actor can influence the tool's search input is affected.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2489 WID-SEC-W-2026-2489 — n8n: Mehrere Schwachstellen 2026-10-03T16:11:07.025551+00:00

Ein Angreifer kann mehrere Schwachstellen in n8n ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, um einen SQL-Injection Angriff durchzuführen, und um beliebigen Programmcode auszuführen.