High (AgentArmorHQ estimate)Path traversalJuly 22, 2026

n8n: Edit Image Node Format Injection Allows Arbitrary File Write

Product: n8n
Affected: n8n < 1.123.67, >= 2.0.0-rc.0 < 2.31.5, >= 2.32.0 < 2.32.1
Fixed in: 1.123.67, 2.31.5, 2.32.1

Last verified against sources: October 26, 2026

Am I affected?

n8n: affected n8n < 1.123.67, >= 2.0.0-rc.0 < 2.31.5, >= 2.32.0 < 2.32.1. Fixed in 1.123.67, 2.31.5, 2.32.1.

Check your version: run npm ls n8n. Versions < 1.123.67 of n8n are affected. [1]

What to do now

Upgrade to the fixed version: run npm install n8n@1.123.67 (first patched version 1.123.67). [1]
Upgrade to n8n 1.123.67, 2.31.5, or 2.32.1, or later. [1]
Restrict n8n instance access to fully trusted users only. [1]
Disable the Edit Image node by adding n8n-nodes-base.editImage to the NODES_EXCLUDE environment variable. [1]

General practice, not from the source: if the affected software could read tokens or credentials, rotate them after upgrading; pin versions and review changes before updating tools your agents run.

Discuss this incident

What happened

The n8n Edit Image node passed its output format to the underlying image library without validation. [1]
A crafted value could write bytes to a location outside the node's working directory. [1]

Impact

An authenticated user able to run workflows could use this to write arbitrary files in the n8n instance. [1]

What was done

The issue has been fixed in n8n versions 1.123.67, 2.31.5, and 2.32.1. [1]
Users should upgrade to one of these versions or later to remediate the vulnerability. [1]

Sources

GHSA-xmc9-4f2h-jf9c — GitHub Advisory Database

Every statement above was checked against these sources before publishing. Spotted an error? Tell us and we will correct it with a dated note.

Copy a plain-text summary for Slack, GitHub issues, or team security channels.

Brief

n8n: Edit Image Node Format Injection Allows Arbitrary File Write
Product: n8n | Affected: n8n < 1.123.67, >= 2.0.0-rc.0 < 2.31.5, >= 2.32.0 < 2.32.1 | Fixed in: 1.123.67, 2.31.5, 2.32.1
Summary: The n8n Edit Image node passed its output format to the underlying image library without validation.
Source & remediation on AgentArmorHQ: https://agentarmorhq.com/incidents/2026/07/ghsa-xmc9-4f2h-jf9c-n8n

Was this page useful?

Corrections

Report an error or request a correction. We review requests within 5 business days and add a dated correction note.

Discussions for n8n

Ask questions or share configuration tips. Governed by our Community Rules & Terms.

No posts match this filter yet.

Be the first to ask a question or share a working tip.

← All incidents Related tools in directory Check package