diff --git a/server/presenters/document.js b/server/presenters/document.js
index c459db85f..fbf465665 100644
--- a/server/presenters/document.js
+++ b/server/presenters/document.js
@@ -8,7 +8,7 @@ type Options = {
   isPublic?: boolean,
 };
 
-const attachmentRegex = /!\[.*\]\(\/api\/attachments\.redirect\?id=(?<id>.*)\)/gi;
+const attachmentRegex = /!\[.*?\]\(\/api\/attachments\.redirect\?id=(?<id>[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\)/gi;
 
 // replaces attachments.redirect urls with signed/authenticated url equivalents
 async function replaceImageAttachments(text) {