Vulnerability Details CVE-2026-116145
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-32 contains a security policy bypass caused by an incomplete fix for the policy bypass reported in GHSA-jjp4-3fwf-393j. An attacker able to supply input to ImageMagick can evade configured security policy restrictions, allowing operations the policy was intended to block.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 1.3%
CVSS Severity
CVSS v3 Score 3.9