Vulnerability Details CVE-2026-25524
Magento Long Term Support (LTS) is an unofficial, community-driven project provides an alternative to the Magento Community Edition e-commerce platform with a high level of backward compatibility. Prior to version 20.17.0, PHP functions such as `getimagesize()`, `file_exists()`, and `is_readable()` can trigger deserialization when processing `phar://` stream wrapper paths. OpenMage LTS uses these functions with potentially controllable file paths during image validation and media handling. An attacker who can upload a malicious phar file (disguised as an image) and trigger one of these functions with a `phar://` path can achieve arbitrary code execution. Version 20.17.0 patches the issue.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 29.9%
CVSS Severity
CVSS v3 Score 8.1
References
Products affected by CVE-2026-25524
-
cpe:2.3:a:openmage:magento:-
-
cpe:2.3:a:openmage:magento:1.1.1
-
cpe:2.3:a:openmage:magento:1.1.2
-
cpe:2.3:a:openmage:magento:1.1.3
-
cpe:2.3:a:openmage:magento:1.1.4
-
cpe:2.3:a:openmage:magento:1.1.5
-
cpe:2.3:a:openmage:magento:1.1.6
-
cpe:2.3:a:openmage:magento:1.1.7
-
cpe:2.3:a:openmage:magento:1.1.8
-
cpe:2.3:a:openmage:magento:1.2.0
-
cpe:2.3:a:openmage:magento:1.2.0.1
-
cpe:2.3:a:openmage:magento:1.2.0.2
-
cpe:2.3:a:openmage:magento:1.2.0.3
-
cpe:2.3:a:openmage:magento:1.2.1
-
cpe:2.3:a:openmage:magento:1.2.1.1
-
cpe:2.3:a:openmage:magento:1.2.1.2
-
cpe:2.3:a:openmage:magento:1.3.0
-
cpe:2.3:a:openmage:magento:1.3.1
-
cpe:2.3:a:openmage:magento:1.3.1.1
-
cpe:2.3:a:openmage:magento:1.3.2
-
cpe:2.3:a:openmage:magento:1.3.2.1
-
cpe:2.3:a:openmage:magento:1.3.2.2
-
cpe:2.3:a:openmage:magento:1.3.2.3
-
cpe:2.3:a:openmage:magento:1.3.2.4
-
cpe:2.3:a:openmage:magento:1.3.3.0
-
cpe:2.3:a:openmage:magento:1.4.0.0
-
cpe:2.3:a:openmage:magento:1.4.0.1
-
cpe:2.3:a:openmage:magento:1.4.1.0
-
cpe:2.3:a:openmage:magento:1.4.1.1
-
cpe:2.3:a:openmage:magento:1.4.2.0
-
cpe:2.3:a:openmage:magento:1.5.0.0
-
cpe:2.3:a:openmage:magento:1.5.0.1
-
cpe:2.3:a:openmage:magento:1.5.1.0
-
cpe:2.3:a:openmage:magento:1.6.0.0
-
cpe:2.3:a:openmage:magento:1.6.1.0
-
cpe:2.3:a:openmage:magento:1.6.2.0
-
cpe:2.3:a:openmage:magento:1.7.0.0
-
cpe:2.3:a:openmage:magento:1.7.0.1
-
cpe:2.3:a:openmage:magento:1.7.0.2
-
cpe:2.3:a:openmage:magento:1.8.0.0
-
cpe:2.3:a:openmage:magento:1.8.1.0
-
cpe:2.3:a:openmage:magento:1.9.0.0
-
cpe:2.3:a:openmage:magento:1.9.0.1
-
cpe:2.3:a:openmage:magento:1.9.1.0
-
cpe:2.3:a:openmage:magento:1.9.1.1
-
cpe:2.3:a:openmage:magento:19.4.0
-
cpe:2.3:a:openmage:magento:19.4.1
-
cpe:2.3:a:openmage:magento:19.4.10
-
cpe:2.3:a:openmage:magento:19.4.11
-
cpe:2.3:a:openmage:magento:19.4.12
-
cpe:2.3:a:openmage:magento:19.4.13
-
cpe:2.3:a:openmage:magento:19.4.14
-
cpe:2.3:a:openmage:magento:19.4.15
-
cpe:2.3:a:openmage:magento:19.4.16
-
cpe:2.3:a:openmage:magento:19.4.17
-
cpe:2.3:a:openmage:magento:19.4.18
-
cpe:2.3:a:openmage:magento:19.4.19
-
cpe:2.3:a:openmage:magento:19.4.2
-
cpe:2.3:a:openmage:magento:19.4.20
-
cpe:2.3:a:openmage:magento:19.4.21
-
cpe:2.3:a:openmage:magento:19.4.22
-
cpe:2.3:a:openmage:magento:19.4.23
-
cpe:2.3:a:openmage:magento:19.4.3
-
cpe:2.3:a:openmage:magento:19.4.4
-
cpe:2.3:a:openmage:magento:19.4.5
-
cpe:2.3:a:openmage:magento:19.4.6
-
cpe:2.3:a:openmage:magento:19.4.7
-
cpe:2.3:a:openmage:magento:19.4.8
-
cpe:2.3:a:openmage:magento:19.4.9
-
cpe:2.3:a:openmage:magento:19.5.0
-
cpe:2.3:a:openmage:magento:20.0.0
-
cpe:2.3:a:openmage:magento:20.0.1
-
cpe:2.3:a:openmage:magento:20.0.10
-
cpe:2.3:a:openmage:magento:20.0.11
-
cpe:2.3:a:openmage:magento:20.0.12
-
cpe:2.3:a:openmage:magento:20.0.13
-
cpe:2.3:a:openmage:magento:20.0.14
-
cpe:2.3:a:openmage:magento:20.0.15
-
cpe:2.3:a:openmage:magento:20.0.16
-
cpe:2.3:a:openmage:magento:20.0.17
-
cpe:2.3:a:openmage:magento:20.0.18
-
cpe:2.3:a:openmage:magento:20.0.19
-
cpe:2.3:a:openmage:magento:20.0.2
-
cpe:2.3:a:openmage:magento:20.0.20
-
cpe:2.3:a:openmage:magento:20.0.3
-
cpe:2.3:a:openmage:magento:20.0.4
-
cpe:2.3:a:openmage:magento:20.0.5
-
cpe:2.3:a:openmage:magento:20.0.6
-
cpe:2.3:a:openmage:magento:20.0.7
-
cpe:2.3:a:openmage:magento:20.0.8
-
cpe:2.3:a:openmage:magento:20.0.9
-
cpe:2.3:a:openmage:magento:20.10.1
-
cpe:2.3:a:openmage:magento:20.10.2
-
cpe:2.3:a:openmage:magento:20.11.0
-
cpe:2.3:a:openmage:magento:20.12.0
-
cpe:2.3:a:openmage:magento:20.12.1
-
cpe:2.3:a:openmage:magento:20.12.2
-
cpe:2.3:a:openmage:magento:20.12.3
-
cpe:2.3:a:openmage:magento:20.13.0
-
cpe:2.3:a:openmage:magento:20.14.0
-
cpe:2.3:a:openmage:magento:20.15.0
-
cpe:2.3:a:openmage:magento:20.16.0