CVE-2026-77074 in n8n
Summary
by MITRE • 08/20/2026
n8n versions before 1.123.69 contain a server-side request forgery vulnerability in the Edit Image node's Draw Text operation that allows authenticated users to inject MVG primitives. Attackers can craft malicious text values to issue blind outbound HTTP requests to arbitrary addresses or access local files.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Analysis
by VulDB Data Team • 08/20/2026
The n8n automation platform, specifically versions prior to 1.123.69, contains a critical server-side request forgery vulnerability within the Edit Image node's Draw Text operation. This flaw stems from insufficient sanitization of user-supplied input when processing text values intended for image rendering. The underlying mechanism relies on GraphicsMagick or similar imaging libraries that support Magick Vector Graphics (MVG) primitives. When an authenticated user provides a malicious string as part of the draw command, the application fails to properly escape or validate special characters and commands embedded within that string. This lack of input validation allows attackers to inject arbitrary MVG primitives directly into the rendering pipeline, effectively bypassing intended security boundaries for image processing operations.
The operational impact of this vulnerability is significant because it enables authenticated users to perform blind outbound HTTP requests to arbitrary external addresses or access sensitive local files on the server hosting n8n. By crafting specific text payloads that include URL schemes such as http:// or file:/// within the draw command, an attacker can force the backend service to initiate network connections to destinations of their choosing. This capability facilitates data exfiltration through covert channels, where sensitive information from the internal environment is sent to a remote server controlled by the adversary. Additionally, the ability to read local files means that attackers could potentially retrieve configuration files containing secrets, credentials, or other proprietary data stored on the filesystem accessible to the n8n process.
This vulnerability aligns with Common Weakness Enumeration CWE-918, which addresses Server-Side Request Forgery (SSRF), as it allows an attacker to manipulate server-side logic to make requests to unintended destinations. Furthermore, the exploitation technique maps to MITRE ATT&CK techniques such as T1071 Application Layer Protocol for command and control communications if used for exfiltration, or T1083 File and Directory Discovery when accessing local files. The vulnerability highlights a common risk in automation platforms where complex node-based interfaces may expose powerful underlying libraries without adequate input constraints.
To mitigate this issue, organizations running n8n must immediately upgrade to version 1.123.69 or later, which includes patches that enforce stricter validation on inputs passed to the Draw Text operation. Security teams should also implement network-level controls such as egress filtering to restrict outbound connections from the server hosting n8n to only known and trusted endpoints. This reduces the blast radius of any potential SSRF exploitation by preventing unauthorized external communications. Additionally, running the application with minimal file system permissions ensures that even if local file access is attempted, the attacker cannot read sensitive configuration or data files due to restrictive operating system-level access controls.