All vulnerabilities
GHSA-cwm2-vhf5-27q9

n8n: Local Gateway Deep-Link Connect Silently Re-pairs to Attacker-Controlled Instance

n8nFrameworks
Open in ThreatlineRecord JSON
CVSS
5.9Medium
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed inNone listedNo source names a fixed version yet
Published14 Oct 2026Updated 14 Oct 2026GitHub

What fixes it

No source in this snapshot names a fixed version.

Description

Impact

The Local Gateway desktop app could be made to connect to another n8n instance without the user's confirmation, and permissions the user had already granted carried over to that instance. An attacker who gets a user to open a crafted link could connect the user's computer to an instance the attacker controls and act on it through the gateway.

The victim must have the Local Gateway app installed and running and must open a crafted link.

Patches

The issue has been fixed in n8n versions 2.42.1 and 2.41.4. Users should upgrade to one of these versions or later to remediate the vulnerability.

Workarounds

If upgrading is not immediately possible, administrators should consider the following temporary mitigations:

  • Do not open unsolicited links using the n8n-computer-use:// scheme.
  • Quit the Local Gateway app when it is not actively in use to reduce the window of exposure.
  • Restrict the allowedOrigins setting to the specific instance URL the Gateway is paired with, rather than relying on the default wildcard.
  • Disable the Computer Use / Local Gateway feature if it is not required.

These workarounds do not fully remediate the risk and should only be used as short-term mitigation measures.

Text from GitHub Advisory Database

Affected versions 2

  • n8n, npm< 2.42.1GitHub
  • n8n, npm< 2.41.4GitHub