CVE-2026-61858

Analyzed Analyzed - Analysis Complete

APNG Policy Bypass in ImageMagick

Publication date: 2026-07-11

Last updated on: 2026-07-14

Assigner: VulnCheck

Description

ImageMagick before 7.1.2-26 contains a policy bypass vulnerability in the APNG encoder and external delegates due to missing validation checks. Attackers can write files to disallowed paths by bypassing configured policy restrictions through the APNG encoding process.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-11

Last Modified

2026-07-14

Generated

2026-07-31

AI Q&A

2026-07-11

EPSS Evaluated

2026-07-30

NVD

CVE-2026-61858

EUVD

EUVD-2026-43187

Affected Vendors & Products

Vendor	Product	Version / Range
imagemagick	imagemagick	to 6.9.13-51 (exc)
imagemagick	imagemagick	From 7.0.0-0 (inc) to 7.1.2-26 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-59	The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

Attack-Flow Graph

Executive Summary

This vulnerability is a policy bypass issue in ImageMagick's APNG encoder and its external delegates caused by missing validation checks.

It allows an attacker to bypass configured policy restrictions and write files to disallowed paths during the APNG encoding process.

Impact Analysis

The vulnerability can lead to unauthorized modification of data (low integrity compromise) by allowing attackers to write files to restricted locations.

Confidentiality and availability are not affected by this vulnerability.

The attack requires local access, has low complexity, and does not require user interaction or elevated privileges.

Compliance Impact

The provided information does not specify any direct impact of this vulnerability on compliance with common standards and regulations such as GDPR or HIPAA.

Mitigation Strategies

To mitigate this vulnerability, update ImageMagick to version 7.1.2-26 or later, or 6.9.13-51 or later, where the issue has been patched.

Ensure that policy restrictions are properly enforced and validated to prevent bypass through the APNG encoder and external delegates.

Hi! I’m here to help you understand CVE-2026-61858. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70