A AegiFlow
HIGHCVSS 7.7

GHSA-xmc9-4f2h-jf9c

n8n: Edit Image Node Format Injection Allows Arbitrary File Write

Published
2026-07-22
Modified
2026-07-22
Sources
github-advisory

Summary

## Impact The n8n Edit Image node passed its output format to the underlying image library without validation, so a crafted value could write bytes to a location outside the node's working directory. An authenticated user able to run workflows could use this to write arbitrary files in the n8n instance. ## Patches The issue has been fixed in n8n versions 1.123.67, 2.31.5, and 2.32.1. Users should upgrade to one of these versions or later to remediate the vulnerability. ## Workarounds If upgrading is not immediately possible, administrators should consider the following temporary mitigations: - Restrict n8n instance access to fully trusted users only. - Disable the Edit Image node by adding `n8n-nodes-base.editImage` to the `NODES_EXCLUDE` environment variable. These workarounds do not fully remediate the risk and should only be used as short-term mitigation measures.

Affected packages

EcosystemPackageAffected versionsFixed versions
npmn8n1.123.67, 2.32.1, 2.31.5

Remediation: Upgrade to 1.123.67 or later.

References

Includes data from the GitHub Advisory Database, licensed under CC-BY 4.0.