CVE-2026-77074

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2026
Source publication: Aug 20, 2026
Source updated: Aug 21, 2026
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

n8n before 1.123.69 SSRF via Edit Image Node

n8n versions before 1.123.69 contain a server-side request forgery vulnerability in the Edit Image node's Draw Text operation that allows authenticated users to inject MVG primitives. Attackers can craft malicious text values to issue blind outbound HTTP requests to arbitrary addresses or access local files.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

n8n

Vendor: n8n-io
Product: n8n
Platforms: Unknown
Default status: unaffected

n8n · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	semver	1.123.69	Unavailable	None listed
1.123.69	`unaffected`	semver	Unavailable	Unavailable	None listed

n8n

Vendor: n8n-io
Product: n8n
Platforms: Unknown
Default status: unaffected

n8n · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
2.34.0	`affected`	semver	2.34.1	Unavailable	None listed
2.34.1	`unaffected`	semver	Unavailable	Unavailable	None listed

n8n

Vendor: n8n-io
Product: n8n
Platforms: Unknown
Default status: unaffected

n8n · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
2.0.0	`affected`	semver	2.33.4	Unavailable	None listed
2.33.4	`unaffected`	semver	Unavailable	Unavailable	None listed