CVE-2026-72762 affects n8n versions prior to 1.123.67, 2.31.5, and 2.32.1. The vulnerability exists in the Edit Image node, where the output format parameter is not validated before being passed to the image processing library. An authenticated user able to run workflows can exploit this to write arbitrary files outside the node's working directory on the n8n instance, potentially leading to unauthorized file modification or system compromise.

An attacker with authenticated access and workflow execution privileges can write arbitrary files outside the intended directory on the n8n instance. This could lead to unauthorized modification of files, potential privilege escalation, or disruption of the system's normal operation. The CVSS score of 7.7 indicates a high severity vulnerability with network attack vector, requiring low privileges but high impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict workflow execution permissions to trusted users only and monitor for suspicious activity related to the Edit Image node. Avoid exposing n8n instances to untrusted networks or users.