CVE-2026-65590 describes an OS command injection vulnerability in n8n versions before 2.29.8 and 2.30.x before 2.30.1 within the @n8n/computer-use package. The package fails to enforce shell sandbox restrictions on Linux and Windows, unlike macOS where sandboxing is applied. As a result, shell commands executed by the tool run without filesystem or network restrictions, allowing the process to access the host system unrestrictedly. This vulnerability only affects deployments where the @n8n/computer-use package is explicitly installed and running; standard n8n installations are not impacted.

The vulnerability allows an attacker with access to the computer-use agent process to execute shell commands without sandbox restrictions on Linux and Windows hosts. This can lead to unrestricted access to the host filesystem and network from within the compromised process. The CVSS 4.0 score is 5.5 (medium severity), reflecting network attack vector, low attack complexity, and required privileges. There are no known exploits in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, avoid deploying the @n8n/computer-use package on Linux and Windows or restrict its usage to trusted environments. Standard n8n installations without this package are not affected.