ImageMagick <7.1.2-26 APNG encoder policy bypass
CVE-2026-61858 Published on July 11, 2026

ImageMagick before 7.1.2-26 Policy Bypass via APNG encoder
ImageMagick before 7.1.2-26 contains a policy bypass vulnerability in the APNG encoder and external delegates due to missing validation checks. Attackers can write files to disallowed paths by bypassing configured policy restrictions through the APNG encoding process.

Vendor Advisory NVD

Vulnerability Analysis

CVE-2026-61858 is exploitable with local system access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality, with no impact on integrity, and no impact on availability.

Attack Vector:
LOCAL
Attack Complexity:
LOW
Privileges Required:
LOW
User Interaction:
NONE
Scope:
UNCHANGED
Confidentiality Impact:
NONE
Integrity Impact:
LOW
Availability Impact:
NONE

Weakness Type

What is an insecure temporary file Vulnerability?

The software attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

CVE-2026-61858 has been classified to as an insecure temporary file vulnerability or weakness.


Products Associated with CVE-2026-61858

Want to know whenever a new CVE is published for ImageMagick? stack.watch will email you.

 

Affected Versions

ImageMagick: ImageMagick: