Silent Re-pairing Vulnerability in n8n Local Gateway Desktop App

CVE-2026-118677

What is CVE-2026-118677?

The n8n Local Gateway desktop application prior to version 2.41.4 and version 2.42.x before 2.42.1 is susceptible to a silent re-pairing vulnerability. This issue allows an attacker to exploit a crafted n8n-computer-use deep-link, facilitating unauthorized connection to an attacker-controlled n8n instance. Users are lured into opening malicious links, which enables the assailant to inherit the permissions previously granted to the Local Gateway, potentially compromising the user’s computer. This vulnerability highlights the critical need for proper validation checks in app linking processes to prevent unauthorized access.

References