CVE-2026-56377

EUVD-2026-40450 · Published Jun 30, 2026

ImageMagick before 7.1.2-24 contains an incorrect policy check that allows attackers to create or truncate files disallowed by security policies. Remote attackers can bypass path policy restrictions in sandboxed conversion services to write arbitrary files outside intended boundaries.

Technologies

Imagemagick Imagemagick

Weaknesses

CWE-22

CVSS scores

v4.04.8CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
v3.13.3CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Privilege Escalation

T1068Exploitation for Privilege Escalation

References

https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-gm48-c7f2-v67p
https://www.vulncheck.com/advisories/imagemagick-policy-bypass-via-incorrect-path-validation

Potentially impacted assets

See if this affects your attack surface