CVE-2026-61858 | ImageMagick before 7.1.2-26 contains a policy bypass vulnera… | CVSS 3.3 LOW

Description

ImageMagick before 7.1.2-26 contains a policy bypass vulnerability in the APNG encoder and external delegates due to missing validation checks. Attackers can write files to disallowed paths by bypassing configured policy restrictions through the APNG encoding process.

Metadata

CVE ID: CVE-2026-61858
State: PUBLISHED
Assigner: VulnCheck
Reserved: 2026-07-10 21:53 UTC
Published: 2026-07-11 13:01 UTC
Last updated: 2026-07-11 13:01 UTC
Primary CWE: CWE-59
Improper Link Resolution Before File Access ('Link Following…
Vendor / Product: ImageMagick / ImageMagick
Sources: cve.org · NVD

Severity & Metrics

3.3 LOW CVSS 3.1

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Affected products (2)

Vendor	Product	Platform	Versions
ImageMagick	ImageMagick	—	0 < 7.1.2-26, 7.1.2-26
ImageMagick	ImageMagick	—	0 < 6.9.13-51, 6.9.13-51

Weakness (CWE)

CWE	Source	Description
CWE-59	cna	Improper Link Resolution Before File Access ('Link Following')

CVSS scores (2)

Score	Severity	Version	Source	Vector
4.8	MEDIUM	4.0	cna	CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
3.3	LOW	3.1	cna	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

References (2)

GitHub Security Advisory (GHSA-v3j6-27vc-7pw2) https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-v3j6-27vc-7pw2
VulnCheck Advisory: ImageMagick before 7.1.2-26 Policy Bypass via APNG encoder https://www.vulncheck.com/advisories/imagemagick-before-26-policy-bypass-via-apng-encoder