Copyright © 2012 Red Hat, Inc. All rights reserved. Low 2026-06-30T22:08:39 Imagemagick: ImageMagick - Policy Bypass via Incorrect Path Validation 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N CWE-22

ImageMagick before 7.1.2-24 contains an incorrect policy check that allows attackers to create or truncate files disallowed by security policies. Remote attackers can bypass path policy restrictions in sandboxed conversion services to write arbitrary files outside intended boundaries.

A flaw in ImageMagick’s policy enforcement allows remote attackers to bypass path restrictions within sandboxed conversion services. By circumventing these controls, an attacker can create or truncate files outside permitted security boundaries, leading to unauthorized file manipulation.

This flaw in ImageMagick has a Low impact, allowing remote attackers to bypass path policy restrictions within sandboxed conversion services. This could lead to the creation or truncation of files outside of intended boundaries, potentially affecting data integrity in specific configurations where ImageMagick processes untrusted input in a sandboxed environment. To mitigate this use OS-level controls like SELinux, AppArmor, or container restrictions to strictly confine ImageMagick's write permissions. Restrict the process so it can only write to specific temporary or input directories, preventing unauthorized system file changes. Red Hat Enterprise Linux 6 Out of support scope ImageMagick Red Hat Enterprise Linux 7 Out of support scope ImageMagick https://www.cve.org/CVERecord?id=CVE-2026-56377 https://nvd.nist.gov/vuln/detail/CVE-2026-56377 https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-gm48-c7f2-v67p https://www.vulncheck.com/advisories/imagemagick-policy-bypass-via-incorrect-path-validation