CVE-2026-72762CWE-434unrestricted-file-upload

CVE-2026-72762

High · published August 11, 2026

CVSS v3.1
8.8
EPSS
0%
Percentile
40.1
In the wild
Unconfirmed
What it is

n8n versions before 1.123.67, 2.31.5, and 2.32.1 contain an arbitrary file write vulnerability in the Edit Image node, which passes its output format parameter to the underlying image library without validation. An authenticated user able to run workflows can supply a crafted format value to write arbitrary files outside the node's working directory on the n8n instance.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00476 · 40.1th percentile
Weakness
CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2026-08-11T17:19Z
Affected products (3)
ProductVersionsFixed in
n8n/n8n< 1.123.671.123.67
n8n/n8n≥ 2.0.0, < 2.31.52.31.5
n8n/n8nall versions—
References (2)
https://github.com/n8n-io/n8n/security/advisories/GHSA-xmc9-4f2h-jf9c · [email protected]https://www.vulncheck.com/advisories/n8n-before-arbitrary-file-write-via-edit-image-node · [email protected]
EPSS history
Timeline
  • 11 AUG 12:17Z
    n8n before 1.123.67 Arbitrary File Write via Edit Image Node
    cvelistv5