The vulnerability in the @n8n/computer-use package prior to 2.29.8 and 2.30.1 on Linux and Windows platforms involves the lack of enforced shell sandbox restrictions. Unlike macOS where sandboxing was applied, Linux and Windows versions allow shell commands executed by the package to run without any filesystem or network restrictions. This results in unrestricted access to the host filesystem and network from within the computer-use agent process. The issue is limited to deployments explicitly installing and running the @n8n/computer-use package and does not affect standard n8n installations.

Unrestricted shell command execution on affected Linux and Windows systems can lead to unauthorized access to the host filesystem and network. This could allow an attacker with the ability to execute commands via the package to perform actions without sandbox constraints, increasing the risk of system compromise or data exposure. However, this only applies where the @n8n/computer-use package is explicitly installed and running.

Patch status is not yet confirmed — check the vendor advisory GHSA-fpg6-x68q-5793 for current remediation guidance. Since this advisory is a duplicate and withdrawn, refer to the original GHSA advisory for updates on fixes or mitigations. Until patched, avoid deploying or running the @n8n/computer-use package on Linux and Windows or restrict its usage to trusted environments.