CVE-2026-109277: ImageMagick before 7.1.2-32 Policy Bypass via -script Operation
ImageMagick before 7.1.2-32 contains a policy bypass vulnerability in the -script operation due to missing checks on file descriptor handling. Attackers can use the -script operation to close file descriptors not opened by the current operation, circumventing configured security policies.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ImageMagickto a version that resolves this vulnerability.Fixed in 7.1.2-32
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
The attacker needs local access and low privileges. No user interaction is required.
Which deployments are exposed?
ImageMagick versions before 7.1.2-32 are affected where the -script operation is available and configured security policies are relied upon.
What is the practical impact of successful exploitation?
An attacker can use -script to close file descriptors that were not opened by the current operation, bypassing configured security policies. The reported impact is limited to availability; confidentiality and integrity are not affected.