{"id":"CVE-2026-126384","kind":"vulnerability","aliases":["CVE-2026-126384"],"related":[],"title":"n8n: bundled GraphicsMagick flaw lets crafted images run code","description":"n8n before 1.123.89, 2.x before 2.45.5, 2.46.x before 2.46.1, and 3.x before 3.0.1 bundles a GraphicsMagick version with known vulnerabilities in its official Docker image, which the Edit Image node uses to process images. Attackers who can supply crafted untrusted images to an Edit Image workflow, such as one fed by a Webhook node, can execute code on the n8n instance.","summary":"n8n's official Docker image ships a GraphicsMagick version with known vulnerabilities, used by the Edit Image node. An attacker who supplies a crafted image to an Edit Image workflow, such as one fed by a Webhook node, can execute code on the n8n instance.","severity":"high","cvss":7.7,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["ai-tooling","docker","n8n","self-hosted","webhook"],"not_affected_if":["managed-hosting","no-edit-image-node","patched-version"],"how_to_check":"- Check whether any workflow contains an Edit Image node, for example by searching the workflow JSON for `n8n-nodes-base.editImage`.\n- Check the running n8n version with `n8n --version` or the image tag used in your Docker deployment.\n- Check whether an Edit Image workflow can be triggered by a Webhook node or other untrusted input.","fix":"- n8n `1.123.89` or later on the 1.x line\n- n8n `2.45.5` or later on the 2.x line (2.46.x: `2.46.1` or later)\n- n8n `3.0.1` or later on the 3.x line","status":"open","published_at":"2026-11-13T10:17:41+00:00","first_seen_at":"2026-11-13T10:47:18+00:00","triaged_at":"2026-11-13T10:52:32+00:00","updated_at":"2026-11-13T10:52:32+00:00","category":"ai-tooling","confidence":0.7,"triage":{"at":"2026-11-13T10:52:32Z","model":"claude-haiku-5-5","output":{"fix":"- n8n `1.123.89` or later on the 1.x line\n- n8n `2.45.5` or later on the 2.x line (2.46.x: `2.46.1` or later)\n- n8n `3.0.1` or later on the 3.x line","reach":"internet","title":"n8n: bundled GraphicsMagick flaw lets crafted images run code","impact":"high","summary":"n8n's official Docker image ships a GraphicsMagick version with known vulnerabilities, used by the Edit Image node. An attacker who supplies a crafted image to an Edit Image workflow, such as one fed by a Webhook node, can execute code on the n8n instance.","audience":"businesses","category":"ai-tooling","nicknames":[],"who_cares":["n8n","self-hosted","docker","webhook"],"confidence":0.7,"fix_status":"available","needs_auth":"no","worst_case":"Attacker runs code on the n8n server through crafted images.","analyst_note":"","how_to_check":"- Check whether any workflow contains an Edit Image node, for example by searching the workflow JSON for `n8n-nodes-base.editImage`.\n- Check the running n8n version with `n8n --version` or the image tag used in your Docker deployment.\n- Check whether an Edit Image workflow can be triggered by a Webhook node or other untrusted input.","plain_action":"","product_name":"","needs_analyst":false,"not_affected_if":["managed-hosting","patched-version","no-edit-image-node"],"who_is_affected":"Teams that self-host n8n and run workflows with the Edit Image node fed by untrusted input, such as a public Webhook node. Instances on the listed fixed versions are not affected, and workflows that never process external images are unlikely to be exposed. Managed n8n hosting is handled by the vendor.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"yes","severity_if_unknown":"high"},"cost_usd":0.000801,"input_tokens":4666,"output_tokens":668,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-126384':12A,15A '-2026':11A,14A '1.123.89':72C '2':73C '2.45.5':76C '2.46':77C '2.46.1':80C '3':82C '3.0.1':85C 'ai':17B 'ai-tool':16B 'attack':44B,107C 'bundl':2A,86C 'code':9A,65B,129C 'craft':6A,48B,111C 'cve':10A,13A 'docker':19B,28B,96C 'edit':40B,52B,100C,116C 'execut':64B,128C 'fed':58B,122C 'flaw':4A 'graphicsmagick':3A,32B,88C 'host':23B 'imag':7A,29B,41B,49B,53B,97C,101C,106C,113C,117C 'instanc':69B,133C 'known':35B,91C 'let':5A 'n8n':1A,20B,25B,68B,70C,132C 'node':42B,62B,102C,126C 'offici':27B,95C 'one':57B,121C 'process':105C 'run':8A 'self':22B 'self-host':21B 'ship':30B 'suppli':46B,110C 'tool':18B 'untrust':112C 'use':37B,103C 'version':33B,89C 'vulner':36B,92C 'webhook':24B,61B,125C 'workflow':54B,118C 'x':74C,78C,83C","nicknames":[],"mitigations":[],"who_affected":"Teams that self-host n8n and run workflows with the Edit Image node fed by untrusted input, such as a public Webhook node. Instances on the listed fixed versions are not affected, and workflows that never process external images are unlikely to be exposed. Managed n8n hosting is handled by the vendor.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["aitooling","docker","high","n8n","selfhosted","webhook"],"campaign_type":null,"search_a":"'-126384':12A,15A '-2026':11A,14A 'bundl':2A 'code':9A 'craft':6A 'cve':10A,13A 'flaw':4A 'graphicsmagick':3A 'imag':7A 'let':5A 'n8n':1A 'run':8A","search_b":"'ai':17B 'ai-tool':16B 'attack':44B 'code':65B 'craft':48B 'docker':19B,28B 'edit':40B,52B 'execut':64B 'fed':58B 'graphicsmagick':32B 'host':23B 'imag':29B,41B,49B,53B 'instanc':69B 'known':35B 'n8n':20B,25B,68B 'node':42B,62B 'offici':27B 'one':57B 'self':22B 'self-host':21B 'ship':30B 'suppli':46B 'tool':18B 'use':37B 'version':33B 'vulner':36B 'webhook':24B,61B 'workflow':54B","search_c":"'1.123.89':72C '2':73C '2.45.5':76C '2.46':77C '2.46.1':80C '3':82C '3.0.1':85C 'attack':107C 'bundl':86C 'code':129C 'craft':111C 'docker':96C 'edit':100C,116C 'execut':128C 'fed':122C 'graphicsmagick':88C 'imag':97C,101C,106C,113C,117C 'instanc':133C 'known':91C 'n8n':70C,132C 'node':102C,126C 'offici':95C 'one':121C 'process':105C 'suppli':110C 'untrust':112C 'use':103C 'version':89C 'vulner':92C 'webhook':125C 'workflow':118C 'x':74C,78C,83C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-10-28T08:47:32+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"disclosure@vulncheck.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-126384","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-126384","severity":null,"published_at":"2026-11-13T10:17:41+00:00","modified_at":"2026-11-13T10:17:41+00:00","first_seen_at":"2026-11-13T10:47:18+00:00","fetched_at":"2026-11-13T10:47:18+00:00","note":null}],"documents":[{"id":110625,"url":"https://github.com/n8n-io/n8n/security/advisories/GHSA-f2cw-9483-7vcp","title":"Maintainer's advisory: github.com","kind":"vendor","source":"ghsa-repo","publisher":"vendor","text":null,"published_at":"2026-10-28T08:47:32+00:00","relation":"advisory","confidence":null,"note":"Vendor advisory: github.com"},{"id":145011,"url":"https://www.vulncheck.com/advisories/n8n-before-1.123.89-rce-via-bundled-graphicsmagick-in-edit-image-node","title":"Third-party advisory: www.vulncheck.com","kind":"advisory","source":"nvd","publisher":"research","text":null,"published_at":null,"relation":"advisory","confidence":null,"note":"Third-party advisory: www.vulncheck.com"}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}