Home

Description

ImageMagick before 7.1.2-26 contains a policy bypass vulnerability in the APNG encoder and external delegates due to missing validation checks. Attackers can write files to disallowed paths by bypassing configured policy restrictions through the APNG encoding process.

PUBLISHED Reserved 2026-07-10 | Published 2026-07-11 | Updated 2026-07-11 | Assigner VulnCheck




MEDIUM: 4.8CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
LOW: 3.3CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Problem types

Improper Link Resolution Before File Access ('Link Following')

Product status

Default status
unaffected

Any version before 7.1.2-26
affected

7.1.2-26 (semver)
unaffected

Default status
unaffected

Any version before 6.9.13-51
affected

6.9.13-51 (semver)
unaffected

Credits

rexpository reporter

References

github.com/...Magick/security/advisories/GHSA-v3j6-27vc-7pw2 (GitHub Security Advisory (GHSA-v3j6-27vc-7pw2)) vendor-advisory

www.vulncheck.com/...efore-26-policy-bypass-via-apng-encoder (VulnCheck Advisory: ImageMagick before 7.1.2-26 Policy Bypass via APNG encoder) third-party-advisory

cve.org (CVE-2026-61858)

nvd.nist.gov (CVE-2026-61858)

Download JSON