Merged
Size
S
Change Breakdown
Bug Fix70%
Security30%
#28312fix: Block concurring connection requests in computer use (no-changelog)

Connection confirmation race conditions prevented

Connection confirmation prompts in computer use are now properly sequenced — a second request during an active prompt gets rejected with a 409 error instead of opening a confusing second dialog.

When users of n8n's computer use feature receive an incoming connection request, the system displays a confirmation prompt asking whether to approve or deny the connection. A bug existed where multiple concurrent requests could trigger overlapping confirmation dialogs, creating a confusing user experience and potential race conditions.

This fix introduces a state flag that tracks whether a confirmation prompt is currently active. While that flag is true, any incoming connection requests receive an immediate 409 response with an error message. The flag is set before the confirmation prompt appears and cleared once the user responds, whether approved or denied.

The change lives in the computer use daemon, which manages the connection lifecycle between the user's machine and external services. By rejecting concurrent connection attempts, the system maintains a clean, predictable flow — users see one prompt, respond, and only then can new requests trigger another prompt.

This resolves the issue identified in NODE-4828, where multiple simultaneous confirmation prompts could leave the system in an inconsistent state.

View Original GitHub Description

Summary

Reject incoming connect request during a pending connect confirmation prompt

Related Linear tickets, Github issues, and Community forum posts

https://linear.app/n8n/issue/NODE-4828/bug-multiple-concurrent-confirmation-prompts-for-incoming-connection

Review / Merge checklist

  • I have seen this code, I have run this code, and I take responsibility for this code.
  • PR title and summary are descriptive. (conventions) <!-- **Remember, the title automatically goes into the changelog. Use `(no-changelog)` otherwise.** -->
  • Docs updated or follow-up ticket created.
  • Tests included. <!-- A bug is not considered fixed, unless a test is added to prevent it from happening again. A feature is not complete without tests. -->
  • PR Labeled with Backport to Beta, Backport to Stable, or Backport to v1 (if the PR is an urgent fix that needs to be backported)
© 2026 · via Gitpulse