CVE-2026-72762
Received Received - Intake

Arbitrary File Write in n8n via Image Node Format Parameter

Publication date: 2026-08-11

Last updated on: 2026-08-11

Assigner: VulnCheck

Description
n8n versions before 1.123.67, 2.31.5, and 2.32.1 contain an arbitrary file write vulnerability in the Edit Image node, which passes its output format parameter to the underlying image library without validation. An authenticated user able to run workflows can supply a crafted format value to write arbitrary files outside the node's working directory on the n8n instance.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-11
Last Modified
2026-08-11
Generated
2026-08-11
AI Q&A
2026-08-11
EPSS Evaluated
N/A
NVD
CVE-2026-72762
EUVD
EUVD-2026-56141

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
n8n n8n to 1.123.67 (exc)
n8n n8n to 2.31.5 (exc)
n8n n8n to 2.32.1 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-434 The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-72762 is an arbitrary file write vulnerability in n8n versions before 1.123.67, 2.31.5, and 2.32.1. It occurs in the Edit Image node where an unvalidated output format parameter is passed to the image library, allowing authenticated users who can run workflows to write arbitrary files outside the node's working directory.

Detection Guidance

Check n8n version with 'n8n --version' or inspect package.json. If running versions before 1.123.67, 2.31.5, or 2.32.1, the system is vulnerable. Monitor for unexpected file writes in n8n directories or system locations.

Impact Analysis

An attacker could exploit this to write malicious files on the n8n instance, potentially leading to unauthorized code execution, data theft, or system compromise. The impact includes high risks to confidentiality, integrity, and availability of the system.

Compliance Impact

This vulnerability could lead to unauthorized file access or modification, violating data protection requirements under GDPR and HIPAA. It may result in data breaches, unauthorized disclosures, or loss of sensitive information, requiring mandatory breach notifications.

Mitigation Strategies
  • Upgrade n8n to versions 1.123.67, 2.31.5, or 2.32.1 or later immediately.
  • Restrict workflow execution to trusted users only.
  • Disable the Edit Image node by setting NODES_EXCLUDE environment variable to exclude it.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-72762. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart