{"id":"GHSA-cwm2-vhf5-27q9","kind":"vulnerability","aliases":["GHSA-cwm2-vhf5-27q9"],"related":[],"title":"Local Gateway Deep-Link Connect Silently Re-pairs to Attacker-Controlled Instance","description":"## Impact\n\nThe Local Gateway desktop app could be made to connect to another n8n instance without the user's confirmation, and permissions the user had already granted carried over to that instance. An attacker who gets a user to open a crafted link could connect the user's computer to an instance the attacker controls and act on it through the gateway.\n\nThe victim must have the Local Gateway app installed and running and must open a crafted link.\n\n## Patches\n\nThe issue has been fixed in n8n versions 2.42.1 and 2.41.4. Users should upgrade to one of these versions or later to remediate the vulnerability.\n\n## Workarounds\n\nIf upgrading is not immediately possible, administrators should consider the following temporary mitigations:\n- Do not open unsolicited links using the `n8n-computer-use://` scheme.\n- Quit the Local Gateway app when it is not actively in use to reduce the window of exposure.\n- Restrict the `allowedOrigins` setting to the specific instance URL the Gateway is paired with, rather than relying on the default wildcard.\n- Disable the Computer Use / Local Gateway feature if it is not required.\n\nThese workarounds do not fully remediate the risk and should only be used as short-term mitigation measures.","summary":"The n8n Local Gateway desktop app can be made to connect to another n8n instance without user confirmation, and previously granted permissions carry over to that instance. An attacker who gets a user to open a crafted link can act on the user's computer through the gateway.","severity":"medium","cvss":5.9,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"n8n","fixed":[">= 2.42.1"],"affected":"< 2.42.1","ecosystem":"npm"},{"name":"n8n","fixed":[">= 2.41.4"],"affected":"< 2.41.4","ecosystem":"npm"}],"ecosystems":["npm"],"tags":["ai-tooling","computer-use","desktop","local-gateway","n8n"],"not_affected_if":["app-not-installed","feature-disabled","version-patched"],"how_to_check":"- Check the installed n8n version against the affected ranges: `n8n --version` on servers, and the version shown for the n8n package in your project lockfile.\n- Confirm whether the Local Gateway / Computer Use desktop app is installed and running on user machines.\n- Check whether the `allowedOrigins` setting is left at its default wildcard.","fix":"- n8n: upgrade to `2.42.1` or later on the 2.42 line, or `2.41.4` or later on the 2.41 line.","status":"open","published_at":"2026-10-14T09:43:30+00:00","first_seen_at":"2026-11-09T22:53:26+00:00","triaged_at":"2026-11-09T22:56:21+00:00","updated_at":"2026-11-09T22:56:21+00:00","category":"ai-tooling","confidence":0.8,"triage":{"at":"2026-11-09T22:56:21Z","model":"claude-haiku-5-5","output":{"fix":"- n8n: upgrade to `2.42.1` or later on the 2.42 line, or `2.41.4` or later on the 2.41 line.","reach":"internet","title":"n8n Local Gateway: crafted link re-pairs desktop app to attacker's instance","impact":"high","summary":"The n8n Local Gateway desktop app can be made to connect to another n8n instance without user confirmation, and previously granted permissions carry over to that instance. An attacker who gets a user to open a crafted link can act on the user's computer through the gateway.","audience":"businesses","category":"ai-tooling","nicknames":[],"who_cares":["n8n","local-gateway","computer-use","desktop"],"confidence":0.8,"fix_status":"available","needs_auth":"no","worst_case":"attacker acts on user's computer through the gateway","analyst_note":"","how_to_check":"- Check the installed n8n version against the affected ranges: `n8n --version` on servers, and the version shown for the n8n package in your project lockfile.\n- Confirm whether the Local Gateway / Computer Use desktop app is installed and running on user machines.\n- Check whether the `allowedOrigins` setting is left at its default wildcard.","plain_action":"","product_name":"","needs_analyst":false,"not_affected_if":["feature-disabled","app-not-installed","version-patched"],"who_is_affected":"Teams that run the n8n Local Gateway desktop app with Computer Use enabled are exposed, and the victim must have the app installed and running and open a crafted link. Self-hosted n8n servers without the Local Gateway feature in use are not affected by this flaw.","user_interaction":"yes","product_ecosystem":"","needs_special_setup":"yes","severity_if_unknown":"unknown"},"cost_usd":0.000792,"input_tokens":4949,"output_tokens":595,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'2.41.4':177C '2.42.1':175C '27q9':20A,25A 'act':78B,143C 'activ':227C 'administr':199C 'ai':29B 'ai-tool':28B 'allowedorigin':238C 'alreadi':112C 'anoth':51B,99C 'app':44B,92C,156C,222C 'attack':13A,67B,120C,140C 'attacker-control':12A 'carri':61B,114C 'comput':32B,83B,135C,215C,259C 'computer-us':31B 'confirm':56B,106C 'connect':6A,49B,97C,131C 'consid':201C 'control':14A,141C 'could':93C,130C 'craft':75B,128C,164C 'cwm2':18A,23A 'deep':4A 'deep-link':3A 'default':255C 'desktop':34B,43B,91C 'disabl':257C 'exposur':235C 'featur':263C 'fix':171C 'follow':203C 'fulli':273C 'gateway':2A,37B,42B,86B,90C,148C,155C,221C,246C,262C 'get':69B,122C 'ghsa':17A,22A 'ghsa-cwm2-vhf5-27q9':16A,21A 'grant':59B,113C 'immedi':197C 'impact':87C 'instal':157C 'instanc':15A,53B,65B,101C,118C,138C,243C 'issu':168C 'later':187C 'link':5A,76B,129C,165C,210C 'local':1A,36B,41B,89C,154C,220C,261C 'local-gateway':35B 'made':47B,95C 'measur':287C 'mitig':205C,286C 'must':151C,161C 'n8n':26A,27A,38B,40B,52B,100C,173C,214C 'n8n-computer-use':213C 'one':182C 'open':73B,126C,162C,208C 'pair':10A,248C 'patch':166C 'permiss':60B,108C 'possibl':198C 'previous':58B 'quit':218C 'rather':250C 're':9A 're-pair':8A 'reduc':231C 'reli':252C 'remedi':189C,274C 'requir':268C 'restrict':236C 'risk':276C 'run':159C 'scheme':217C 'set':239C 'short':284C 'short-term':283C 'silent':7A 'specif':242C 'temporari':204C 'term':285C 'tool':30B 'unsolicit':209C 'upgrad':180C,194C 'url':244C 'use':33B,211C,216C,229C,260C,281C 'user':55B,71B,81B,104C,110C,124C,133C,178C 'version':174C,185C 'vhf5':19A,24A 'victim':150C 'vulner':191C 'wildcard':256C 'window':233C 'without':54B,102C 'workaround':192C,270C","nicknames":[],"mitigations":[],"who_affected":"Teams that run the n8n Local Gateway desktop app with Computer Use enabled are exposed, and the victim must have the app installed and running and open a crafted link. Self-hosted n8n servers without the Local Gateway feature in use are not affected by this flaw.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":["n8n"],"ptokens":["n8n"],"labels":["aitooling","computeruse","desktop","localgateway","medium","n8n","npm"],"campaign_type":null,"search_a":"'27q9':20A,25A 'attack':13A 'attacker-control':12A 'connect':6A 'control':14A 'cwm2':18A,23A 'deep':4A 'deep-link':3A 'gateway':2A 'ghsa':17A,22A 'ghsa-cwm2-vhf5-27q9':16A,21A 'instanc':15A 'link':5A 'local':1A 'n8n':26A,27A 'pair':10A 're':9A 're-pair':8A 'silent':7A 'vhf5':19A,24A","search_b":"'act':78B 'ai':29B 'ai-tool':28B 'anoth':51B 'app':44B 'attack':67B 'carri':61B 'comput':32B,83B 'computer-us':31B 'confirm':56B 'connect':49B 'craft':75B 'desktop':34B,43B 'gateway':37B,42B,86B 'get':69B 'grant':59B 'instanc':53B,65B 'link':76B 'local':36B,41B 'local-gateway':35B 'made':47B 'n8n':38B,40B,52B 'open':73B 'permiss':60B 'previous':58B 'tool':30B 'use':33B 'user':55B,71B,81B 'without':54B","search_c":"'2.41.4':177C '2.42.1':175C 'act':143C 'activ':227C 'administr':199C 'allowedorigin':238C 'alreadi':112C 'anoth':99C 'app':92C,156C,222C 'attack':120C,140C 'carri':114C 'comput':135C,215C,259C 'confirm':106C 'connect':97C,131C 'consid':201C 'control':141C 'could':93C,130C 'craft':128C,164C 'default':255C 'desktop':91C 'disabl':257C 'exposur':235C 'featur':263C 'fix':171C 'follow':203C 'fulli':273C 'gateway':90C,148C,155C,221C,246C,262C 'get':122C 'grant':113C 'immedi':197C 'impact':87C 'instal':157C 'instanc':101C,118C,138C,243C 'issu':168C 'later':187C 'link':129C,165C,210C 'local':89C,154C,220C,261C 'made':95C 'measur':287C 'mitig':205C,286C 'must':151C,161C 'n8n':100C,173C,214C 'n8n-computer-use':213C 'one':182C 'open':126C,162C,208C 'pair':248C 'patch':166C 'permiss':108C 'possibl':198C 'quit':218C 'rather':250C 'reduc':231C 'reli':252C 'remedi':189C,274C 'requir':268C 'restrict':236C 'risk':276C 'run':159C 'scheme':217C 'set':239C 'short':284C 'short-term':283C 'specif':242C 'temporari':204C 'term':285C 'unsolicit':209C 'upgrad':180C,194C 'url':244C 'use':211C,216C,229C,260C,281C 'user':104C,110C,124C,133C,178C 'version':174C,185C 'victim':150C 'vulner':191C 'wildcard':256C 'window':233C 'without':102C 'workaround':192C,270C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-10-14T09:43:30+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"ghsa-repo","external_id":"GHSA-cwm2-vhf5-27q9","url":"https://github.com/n8n-io/n8n/security/advisories/GHSA-cwm2-vhf5-27q9","severity":"medium","published_at":"2026-10-14T09:43:30+00:00","modified_at":"2026-10-14T09:43:30+00:00","first_seen_at":"2026-11-09T22:53:26+00:00","fetched_at":"2026-11-09T22:53:26+00:00","note":null}],"documents":[{"id":48860,"url":"https://github.com/n8n-io/n8n/security/advisories/GHSA-cwm2-vhf5-27q9","title":"Vendor advisory: github.com","kind":"vendor","source":"nvd","publisher":"vendor","text":null,"published_at":"2026-10-14T09:43:30+00:00","relation":"advisory","confidence":null,"note":"Maintainer's advisory: github.com"}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}