CVE-2026-105081

Analyzed Analyzed - Analysis Complete

IsRightsAuthorizedByName Policy Bypass in ImageMagick

Publication date: 2026-10-12

Last updated on: 2026-11-03

Assigner: VulnCheck

Description

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 does not properly account for symbolic links in the IsRightsAuthorizedByName security policy check, allowing configured policy restrictions to be bypassed. Local attackers who can create a symlink can point it at a policy-restricted path to evade the configured policy.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-12

Last Modified

2026-11-03

Generated

2026-11-08

AI Q&A

2026-10-12

EPSS Evaluated

2026-11-07

NVD

CVE-2026-105081

EUVD

EUVD-2026-97369

Affected Vendors & Products

Vendor	Product	Version / Range
imagemagick	imagemagick	From 7.0.0-0 (inc) to 7.1.2-33 (exc)
imagemagick	imagemagick	to 6.9.13-58 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-59	The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

Attack-Flow Graph

Executive Summary

This vulnerability in ImageMagick versions before 7.1.2-33 and 6.9.13-58 allows local attackers to bypass security policy restrictions by creating a symbolic link pointing to a restricted path. The IsRightsAuthorizedByName policy check fails to properly account for symbolic links, enabling evasion of configured restrictions.

Detection Guidance

To detect this vulnerability, check if your ImageMagick version is below 7.1.2-33 or 6.9.13-58. Run: convert --version or identify --version. If the version is outdated, the system is vulnerable.

Impact Analysis

If you are running a vulnerable version of ImageMagick, an attacker with local access could exploit this to bypass security policies, potentially accessing or modifying restricted files. The impact is limited to confidentiality and integrity with minimal changes to scope.

Compliance Impact

This vulnerability allows local attackers to bypass configured security policies by exploiting symbolic links, potentially enabling unauthorized access to restricted files. While not directly tied to GDPR or HIPAA, such policy bypasses could undermine compliance by allowing unauthorized data access or modification, which may violate data protection requirements.

Mitigation Strategies

Update ImageMagick to version 7.1.2-33 or later for 7.x, or 6.9.13-58 or later for 6.x. Remove unnecessary write permissions for users who can create symlinks to prevent exploitation.

Hi! I’m here to help you understand CVE-2026-105081. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70

EPSS Chart

Security Radar

News mentioning this vulnerability

Loading related security news...