---
id: "GHSA-cwm2-vhf5-27q9"
page: "https://infrastack.ai/live/GHSA-cwm2-vhf5-27q9"
kind: "vulnerability"
aliases: ["GHSA-cwm2-vhf5-27q9"]
title: "Local Gateway Deep-Link Connect Silently Re-pairs to Attacker-Controlled Instance"
severity: "medium"
cvss: 5.9
epss: null
exploited: false
status: "open"
category: "ai-tooling"
products: [{"name": "n8n", "fixed": [">= 2.42.1"], "affected": "< 2.42.1", "ecosystem": "npm"}, {"name": "n8n", "fixed": [">= 2.41.4"], "affected": "< 2.41.4", "ecosystem": "npm"}]
ecosystems: ["npm"]
tags: ["ai-tooling", "computer-use", "desktop", "local-gateway", "n8n"]
not_affected_if: ["app-not-installed", "feature-disabled", "version-patched"]
published_at: "2026-10-14T09:43:30+00:00"
first_seen_at: "2026-11-09T22:53:26+00:00"
updated_at: "2026-11-09T22:56:21+00:00"
sources: [{"source": "ghsa-repo", "url": "https://github.com/n8n-io/n8n/security/advisories/GHSA-cwm2-vhf5-27q9", "first_seen_at": "2026-11-09T22:53:26+00:00"}]
exploit_sources: []
---

# Local Gateway Deep-Link Connect Silently Re-pairs to Attacker-Controlled Instance

Link for people: https://infrastack.ai/live/GHSA-cwm2-vhf5-27q9 (this .md is for agents)

The n8n Local Gateway desktop app can be made to connect to another n8n instance without user confirmation, and previously granted permissions carry over to that instance. An attacker who gets a user to open a crafted link can act on the user's computer through the gateway.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- npm:n8n affected < 2.42.1 fixed >= 2.42.1
- npm:n8n affected < 2.41.4 fixed >= 2.41.4

## How to check

- Check the installed n8n version against the affected ranges: `n8n --version` on servers, and the version shown for the n8n package in your project lockfile.
- Confirm whether the Local Gateway / Computer Use desktop app is installed and running on user machines.
- Check whether the `allowedOrigins` setting is left at its default wildcard.

## Fix

- n8n: upgrade to `2.42.1` or later on the 2.42 line, or `2.41.4` or later on the 2.41 line.

## Timeline

- 2026-11-09T22:53:26+00:00 ghsa-repo https://github.com/n8n-io/n8n/security/advisories/GHSA-cwm2-vhf5-27q9

## Documents

- [advisory] Vendor advisory: github.com https://github.com/n8n-io/n8n/security/advisories/GHSA-cwm2-vhf5-27q9

## From the sources

## Impact

The Local Gateway desktop app could be made to connect to another n8n instance without the user's confirmation, and permissions the user had already granted carried over to that instance. An attacker who gets a user to open a crafted link could connect the user's computer to an instance the attacker controls and act on it through the gateway.

The victim must have the Local Gateway app installed and running and must open a crafted link.

## Patches

The issue has been fixed in n8n versions 2.42.1 and 2.41.4. Users should upgrade to one of these versions or later to remediate the vulnerability.

## Workarounds

If upgrading is not immediately possible, administrators should consider the following temporary mitigations:
- Do not open unsolicited links using the `n8n-computer-use://` scheme.
- Quit the Local Gateway app when it is not actively in use to reduce the window of exposure.
- Restrict the `allowedOrigins` setting to the specific instance URL the Gateway is paired with, rather than relying on the default wildcard.
- Disable the Computer Use / Local Gateway feature if it is not required.

These workarounds do not fully remediate the risk and should only be used as short-term mitigation measures.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_