{"id":"GHSA-f2cw-9483-7vcp","kind":"vulnerability","aliases":["GHSA-f2cw-9483-7vcp"],"related":[],"title":"Insecure GraphicsMagick Configuration","description":"## Impact\r\n\r\nThe version of GraphicsMagick bundled in the official n8n Docker image is affected by known vulnerabilities in some of its components. Processing untrusted images with the Edit Image node could lead to remote code execution on the n8n instance.\r\n\r\n## Patches\r\n\r\nThe issue has been fixed in n8n versions 1.123.89, 2.45.5, 2.46.1 and v3.0.1. Users should upgrade to one of these versions or later to remediate the vulnerability.\r\n\r\n## Workarounds\r\n\r\nIf upgrading is not immediately possible, administrators should consider the following temporary mitigations:\r\n- Restrict n8n instance access to fully trusted users only.\r\n- Audit active workflows and deactivate any workflow that connects an unauthenticated Webhook node to an Edit Image node.\r\n- Apply network-level controls to restrict access to webhook endpoints that feed into Edit Image workflows.\r\n- Remove the GraphicsMagick coder modules for `url`, `svg`, `mvg`, `pcd`, and `msl` from the n8n container if those formats are not required.\r\n- Disable the Edit Image node by adding `n8n-nodes-base.editImage` to the `NODES_EXCLUDE` environment variable if it is not required.\r\n\r\nThese workarounds do not fully remediate the risk and should only be used as short-term mitigation measures.","summary":"The GraphicsMagick image library bundled in the official n8n Docker image has known vulnerabilities in some of its components. Processing untrusted images with the Edit Image node can lead to remote code execution on the n8n instance.","severity":"high","cvss":7.7,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"n8n","fixed":[">= 1.123.89"],"affected":"< 1.123.89","ecosystem":"npm"},{"name":"n8n","fixed":[">= 2.46.1"],"affected":"< 2.46.1","ecosystem":"npm"},{"name":"n8n","fixed":[">= 2.45.5"],"affected":"< 2.45.5","ecosystem":"npm"},{"name":"n8n","fixed":[">= 3.0.1"],"affected":"< 3.0.1","ecosystem":"npm"}],"ecosystems":["npm"],"tags":["docker","graphicsmagick","n8n","package","self-hosted"],"not_affected_if":["auth-required","fixed-version","no-edit-image-node"],"how_to_check":"- Check the n8n version with `n8n --version` or the image tag in your Docker deployment.\n- Look for workflows that use the Edit Image node (`n8n-nodes-base.editImage`) fed by a Webhook node or other untrusted input.\n- Check whether `NODES_EXCLUDE` includes `n8n-nodes-base.editImage`.","fix":"- n8n `1.123.89`\n- n8n `2.45.5`\n- n8n `2.46.1`\n- n8n `3.0.1`","status":"open","published_at":"2026-10-28T08:47:32+00:00","first_seen_at":"2026-11-09T22:53:25+00:00","triaged_at":"2026-11-09T22:54:15+00:00","updated_at":"2026-11-09T22:54:15+00:00","category":"package","confidence":0.8,"triage":{"at":"2026-11-09T22:54:15Z","model":"claude-haiku-5-5","output":{"fix":"- n8n `1.123.89`\n- n8n `2.45.5`\n- n8n `2.46.1`\n- n8n `3.0.1`","reach":"internet","title":"n8n: bundled GraphicsMagick flaw lets untrusted images run code","impact":"high","summary":"The GraphicsMagick image library bundled in the official n8n Docker image has known vulnerabilities in some of its components. Processing untrusted images with the Edit Image node can lead to remote code execution on the n8n instance.","audience":"businesses","category":"package","nicknames":[],"who_cares":["n8n","self-hosted","docker","graphicsmagick"],"confidence":0.8,"fix_status":"available","needs_auth":"unknown","worst_case":"remote code execution on the n8n server","analyst_note":"","how_to_check":"- Check the n8n version with `n8n --version` or the image tag in your Docker deployment.\n- Look for workflows that use the Edit Image node (`n8n-nodes-base.editImage`) fed by a Webhook node or other untrusted input.\n- Check whether `NODES_EXCLUDE` includes `n8n-nodes-base.editImage`.","plain_action":"","product_name":"","needs_analyst":false,"not_affected_if":["fixed-version","no-edit-image-node","auth-required"],"who_is_affected":"Self-hosted n8n instances that run the Edit Image node on images from untrusted sources, such as unauthenticated Webhook workflows, are exposed. Instances on versions listed as fixed, or that do not use the Edit Image node on untrusted input, are less exposed. Workflows that never process external images can be deprioritised.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"yes","severity_if_unknown":"high"},"cost_usd":0.000807,"input_tokens":5026,"output_tokens":608,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-7':8A,14A '1.123.89':113C '2.45.5':114C '2.46.1':115C '9483':7A,13A 'access':149C,180C 'activ':156C 'add':218C 'administr':139C 'affect':77C 'appli':173C 'audit':155C 'bundl':31B,69C 'code':58B,98C 'coder':193C 'compon':45B,85C 'configur':3A 'connect':163C 'consid':141C 'contain':205C 'control':177C 'could':94C 'deactiv':159C 'disabl':212C 'docker':20B,36B,74C 'edit':51B,91C,170C,187C,214C 'endpoint':183C 'environ':224C 'exclud':223C 'execut':59B,99C 'f2cw':6A,12A 'feed':185C 'fix':109C 'follow':143C 'format':208C 'fulli':151C,235C 'ghsa':5A,11A 'ghsa-f2cw':4A,10A 'graphicsmagick':2A,21B,28B,68C,192C 'host':26B 'imag':29B,37B,48B,52B,75C,88C,92C,171C,188C,215C 'immedi':137C 'impact':64C 'insecur':1A 'instanc':63B,103C,148C 'issu':106C 'known':39B,79C 'later':127C 'lead':55B,95C 'level':176C 'librari':30B 'measur':249C 'mitig':145C,248C 'modul':194C 'msl':201C 'mvg':198C 'n8n':16A,17A,18A,19A,22B,35B,62B,73C,102C,111C,147C,204C 'n8n-nodes-base.editimage':219C 'network':175C 'network-level':174C 'node':53B,93C,167C,172C,216C,222C 'offici':34B,72C 'one':122C 'packag':23B 'patch':104C 'pcd':199C 'possibl':138C 'process':46B,86C 'remedi':129C,236C 'remot':57B,97C 'remov':190C 'requir':211C,230C 'restrict':146C,179C 'risk':238C 'self':25B 'self-host':24B 'short':246C 'short-term':245C 'svg':197C 'temporari':144C 'term':247C 'trust':152C 'unauthent':165C 'untrust':47B,87C 'upgrad':120C,134C 'url':196C 'use':243C 'user':118C,153C 'v3.0.1':117C 'variabl':225C 'vcp':9A,15A 'version':66C,112C,125C 'vulner':40B,80C,131C 'webhook':166C,182C 'workaround':132C,232C 'workflow':157C,161C,189C","nicknames":[],"mitigations":[],"who_affected":"Self-hosted n8n instances that run the Edit Image node on images from untrusted sources, such as unauthenticated Webhook workflows, are exposed. Instances on versions listed as fixed, or that do not use the Edit Image node on untrusted input, are less exposed. Workflows that never process external images can be deprioritised.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":["n8n"],"ptokens":["n8n"],"labels":["docker","graphicsmagick","high","n8n","npm","package","selfhosted"],"campaign_type":null,"search_a":"'-7':8A,14A '9483':7A,13A 'configur':3A 'f2cw':6A,12A 'ghsa':5A,11A 'ghsa-f2cw':4A,10A 'graphicsmagick':2A 'insecur':1A 'n8n':16A,17A,18A,19A 'vcp':9A,15A","search_b":"'bundl':31B 'code':58B 'compon':45B 'docker':20B,36B 'edit':51B 'execut':59B 'graphicsmagick':21B,28B 'host':26B 'imag':29B,37B,48B,52B 'instanc':63B 'known':39B 'lead':55B 'librari':30B 'n8n':22B,35B,62B 'node':53B 'offici':34B 'packag':23B 'process':46B 'remot':57B 'self':25B 'self-host':24B 'untrust':47B 'vulner':40B","search_c":"'1.123.89':113C '2.45.5':114C '2.46.1':115C 'access':149C,180C 'activ':156C 'add':218C 'administr':139C 'affect':77C 'appli':173C 'audit':155C 'bundl':69C 'code':98C 'coder':193C 'compon':85C 'connect':163C 'consid':141C 'contain':205C 'control':177C 'could':94C 'deactiv':159C 'disabl':212C 'docker':74C 'edit':91C,170C,187C,214C 'endpoint':183C 'environ':224C 'exclud':223C 'execut':99C 'feed':185C 'fix':109C 'follow':143C 'format':208C 'fulli':151C,235C 'graphicsmagick':68C,192C 'imag':75C,88C,92C,171C,188C,215C 'immedi':137C 'impact':64C 'instanc':103C,148C 'issu':106C 'known':79C 'later':127C 'lead':95C 'level':176C 'measur':249C 'mitig':145C,248C 'modul':194C 'msl':201C 'mvg':198C 'n8n':73C,102C,111C,147C,204C 'n8n-nodes-base.editimage':219C 'network':175C 'network-level':174C 'node':93C,167C,172C,216C,222C 'offici':72C 'one':122C 'patch':104C 'pcd':199C 'possibl':138C 'process':86C 'remedi':129C,236C 'remot':97C 'remov':190C 'requir':211C,230C 'restrict':146C,179C 'risk':238C 'short':246C 'short-term':245C 'svg':197C 'temporari':144C 'term':247C 'trust':152C 'unauthent':165C 'untrust':87C 'upgrad':120C,134C 'url':196C 'use':243C 'user':118C,153C 'v3.0.1':117C 'variabl':225C 'version':66C,112C,125C 'vulner':80C,131C 'webhook':166C,182C 'workaround':132C,232C 'workflow':157C,161C,189C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-10-28T08:47:32+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"ghsa-repo","external_id":"GHSA-f2cw-9483-7vcp","url":"https://github.com/n8n-io/n8n/security/advisories/GHSA-f2cw-9483-7vcp","severity":"high","published_at":"2026-10-28T08:47:32+00:00","modified_at":"2026-10-28T10:19:55+00:00","first_seen_at":"2026-11-09T22:53:25+00:00","fetched_at":"2026-11-09T22:53:25+00:00","note":null}],"documents":[{"id":110625,"url":"https://github.com/n8n-io/n8n/security/advisories/GHSA-f2cw-9483-7vcp","title":"Maintainer's advisory: github.com","kind":"vendor","source":"ghsa-repo","publisher":"vendor","text":null,"published_at":null,"relation":"advisory","confidence":null,"note":"Maintainer's advisory: github.com"}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}