CVE-2026-126384 · AI agents & MCP
NO FIX YET · SEE WHAT TO DO
n8n's official Docker image ships a GraphicsMagick version with known vulnerabilities, used by the Edit Image node. An attacker who supplies a crafted image to an Edit Image workflow, such as one fed by a Webhook node, can execute code on the n8n instance.
first public Oct 28, 2026 · 1 source
Check it with your coding agent
It reads this page and tells you if your code or app is affected.
Teams that self-host n8n and run workflows with the Edit Image node fed by untrusted input, such as a public Webhook node. Instances on the listed fixed versions are not affected, and workflows that never process external images are unlikely to be exposed. Managed n8n hosting is handled by the vendor.
Not affected if managed-hosting, no-edit-image-node, patched-version
Who cares docker, n8n, self-hosted, webhook
n8n-nodes-base.editImage.n8n --version or the image tag used in your Docker deployment.1.123.89 or later on the 1.x line2.45.5 or later on the 2.x line (2.46.x: 2.46.1 or later)3.0.1 or later on the 3.x linen8n before 1.123.89, 2.x before 2.45.5, 2.46.x before 2.46.1, and 3.x before 3.0.1 bundles a GraphicsMagick version with known vulnerabilities in its official Docker image, which the Edit Image node uses to process images. Attackers who can supply crafted untrusted images to an Edit Image workflow, such as one fed by a Webhook node, can execute code on the n8n instance.
This page as .md · .json · CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
InfraStack checks it against your stack and answers on your report, with the evidence and the fix.