{"id":"CVE-2026-116145","kind":"vulnerability","aliases":["CVE-2026-116145"],"related":[],"title":"ImageMagick: incomplete fix lets crafted input bypass security policy","description":"ImageMagick before 6.9.13-58 and 7.x before 7.1.2-32 contains a security policy bypass caused by an incomplete fix for the policy bypass reported in GHSA-jjp4-3fwf-393j. An attacker able to supply input to ImageMagick can evade configured security policy restrictions, allowing operations the policy was intended to block.","summary":"ImageMagick's security policy, which restricts what image operations are allowed, can be evaded because an earlier fix was incomplete. An attacker who can supply image input may perform operations the policy was meant to block.","severity":"low","cvss":3.9,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["image-processing","imagemagick","package","self-hosted"],"not_affected_if":["no-untrusted-input","patched-version"],"how_to_check":"- Run `magick -version` (or `convert -version`) and compare the version against `6.9.13-58` and `7.1.2-32`.\n- Check whether a policy file (policy.xml) restricts operations in your ImageMagick configuration.","fix":"- Upgrade ImageMagick 6 to `6.9.13-58` or later.\n- Upgrade ImageMagick 7 to `7.1.2-32` or later.","status":"open","published_at":"2026-10-25T14:16:52+00:00","first_seen_at":"2026-10-25T14:41:22+00:00","triaged_at":"2026-10-25T14:44:17+00:00","updated_at":"2026-10-25T14:44:17+00:00","category":"package","confidence":0.6,"triage":{"at":"2026-10-25T14:44:17Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade ImageMagick 6 to `6.9.13-58` or later.\n- Upgrade ImageMagick 7 to `7.1.2-32` or later.","reach":"unknown","title":"ImageMagick: incomplete fix lets crafted input bypass security policy","impact":"medium","summary":"ImageMagick's security policy, which restricts what image operations are allowed, can be evaded because an earlier fix was incomplete. An attacker who can supply image input may perform operations the policy was meant to block.","category":"package","nicknames":[],"who_cares":["imagemagick","self-hosted","image-processing"],"confidence":0.6,"needs_auth":"unknown","worst_case":"Policy-blocked image operations run anyway on the server","analyst_note":"Check the NVD entry and GHSA-jjp4-3fwf-393j for the specific policy domains bypassed and any exploit details.","how_to_check":"- Run `magick -version` (or `convert -version`) and compare the version against `6.9.13-58` and `7.1.2-32`.\n- Check whether a policy file (policy.xml) restricts operations in your ImageMagick configuration.","needs_analyst":true,"not_affected_if":["patched-version","no-untrusted-input"],"who_is_affected":"Systems that run ImageMagick below the fixed versions and rely on its policy.xml restrictions to limit what untrusted uploads can do. Servers that never process untrusted images, or that run a fixed version, can skip it.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"low"},"cost_usd":0.000613,"input_tokens":3351,"output_tokens":555,"severity_before":"low"},"analyst_status":null,"analyst_note":null,"search":"'-116145':12A,15A '-2026':11A,14A '-32':69C '-58':63C '393j':90C '3fwf':89C '6.9.13':62C '7':65C '7.1.2':68C 'abl':93C 'allow':34B,105C 'attack':45B,92C 'block':59B,112C 'bypass':7A,74C,83C 'caus':75C 'configur':101C 'contain':70C 'craft':5A 'cve':10A,13A 'earlier':40B 'evad':37B,100C 'fix':3A,41B,79C 'ghsa':87C 'ghsa-jjp4-3fwf-393j':86C 'host':23B 'imag':17B,31B,49B 'image-process':16B 'imagemagick':1A,19B,24B,60C,98C 'incomplet':2A,43B,78C 'input':6A,50B,96C 'intend':110C 'jjp4':88C 'let':4A 'may':51B 'meant':57B 'oper':32B,53B,106C 'packag':20B 'perform':52B 'polici':9A,27B,55B,73C,82C,103C,108C 'process':18B 'report':84C 'restrict':29B,104C 'secur':8A,26B,72C,102C 'self':22B 'self-host':21B 'suppli':48B,95C 'x':66C","nicknames":[],"mitigations":[],"who_affected":"Systems that run ImageMagick below the fixed versions and rely on its policy.xml restrictions to limit what untrusted uploads can do. Servers that never process untrusted images, or that run a fixed version, can skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-25T14:16:52+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"disclosure@vulncheck.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-116145","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-116145","severity":null,"published_at":"2026-10-25T14:16:52+00:00","modified_at":"2026-10-25T14:16:52+00:00","first_seen_at":"2026-10-25T14:41:22+00:00","fetched_at":"2026-10-25T14:41:22+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}