n8n published a security advisory on 28 October 2026 describing a Browser Use upload flaw that could expose files readable by the n8n server process. The advisory rates GHSA-9qx8-fhxv-w794 Moderate, with a Common Vulnerability Scoring System (CVSS) score of 6.0, and says versions 2.46.1, 2.45.5 and 3.0.1 contain fixes.[1]
According to the advisory, browser_upload accepted absolute file paths and passed them to Playwright. With the browser session connected remotely, Playwright resolved those paths on the n8n server rather than the user's machine. An authenticated member connecting their own browser session could send file contents into the page controlled by the assistant and retrieve them there. Instance configuration files were within scope if readable by the n8n process user.[1]
Exploitation requires Browser Use to be explicitly enabled with N8N_INSTANCE_AI_BROWSER_USE_ENABLED=true. The approval prompt displayed only the active page host; it neither displayed nor gated the file path, according to n8n.[1]
n8n recommends upgrading to one of the named fixed versions or later. Temporary measures include disabling Browser Use by setting the flag to false or leaving it unset, restricting instance access to fully trusted users, and removing global:member access from users who are not fully trusted. The advisory says these measures do not fully remediate the risk.[1]
[1]: https://github.com/n8n-io/n8n/security/advisories/ghsa-9qx8-fhxv-w794
Sources
Check or correct this page
Verification record
The digest below shows whether the text you are reading matches the published source. It does not show that the reporting is correct. The build computes it from this page's Markdown source and lists it in the site manifest.
0f463ab25aa1e5552d666acae2f45d007386aaedfea47a73e5e9f84c140be478
