CVE-2026-72762

Name of the Vulnerable Software and Affected Versions n8n versions prior to 1.123.67 n8n versions prior to 2.31.5 n8n versions prior to 2.32.1

Description An arbitrary file write issue exists in the Edit Image node. The node passes the output format parameter to the underlying image library without proper validation. An authenticated user with permissions to execute workflows can provide a specially crafted value for the output format to write files outside the designated working directory of the n8n instance.

Recommendations Update n8n to version 1.123.67 or later. Update n8n to version 2.31.5 or later. Update n8n to version 2.32.1 or later.