https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 20:23:26 +0000 https://cve.radiocsirt.org/vuln/cve-2026-72773 <p><strong>Affected:</strong> n8n-io n8n</p> <p>n8n before 2.31.5 and 2.32.x before 2.32.1 contain a path-confinement bypass in the @n8n/computer-use file-search (search_files) tool. A crafted search pattern can bypass the base-directory confinement check and expand to locations outside the configured directory, causing the tool to return the names and contents of arbitrary local files readable by the daemon&#39;s OS user. Any deployment where an actor can influence the tool&#39;s search input is affected.</p> <p><strong>Affected:</strong> n8n-io n8n</p> <p>n8n before 2.31.5 and 2.32.x before 2.32.1 contain a path-confinement bypass in the @n8n/computer-use file-search (search_files) tool. A crafted search pattern can bypass the base-directory confinement check and expand to locations outside the configured directory, causing the tool to return the names and contents of arbitrary local files readable by the daemon&#39;s OS user. Any deployment where an actor can influence the tool&#39;s search input is affected.</p> https://cve.radiocsirt.org/vuln/cve-2026-72773