The '@n8n/computer-use' file-search tool in n8n improperly restricts file searches to a configured base directory. An attacker able to control the search input can craft patterns that bypass this confinement, causing the tool to return file names and contents from locations outside the base directory. This results in disclosure of arbitrary local files readable by the daemon's OS user. The vulnerability is identified as CWE-22 (Path Traversal). It is fixed in n8n versions 2.31.5 and 2.32.1. No known exploits in the wild have been reported. The CVSS 4.0 vector indicates network attack vector, low attack complexity, partial privileges required, no user interaction, and high scope change, with an overall moderate severity rating.

Successful exploitation allows an attacker with the ability to influence the file search input to read arbitrary files on the host system that the n8n daemon's OS user can access. This can lead to unauthorized disclosure of sensitive local files outside the intended sandbox directory, potentially exposing confidential information.

A fix is available in n8n versions 2.31.5 and 2.32.1. Users should upgrade to one of these versions or later to remediate the vulnerability. If immediate upgrade is not possible, temporary mitigations include restricting n8n instance access to fully trusted users, disabling or removing AI agent workflows using the 'computer-use' package, and running the n8n process under a dedicated low-privilege user account. These workarounds do not fully eliminate the risk and should only be used as short-term measures.