Unknown · Imagemagick · CVE-2026-28689
**Name of the Vulnerable Software and Affected Versions**
ImageMagick versions prior to 7.1.2-16
ImageMagick versions prior to 6.9.13-41
**Description**
ImageMagick is software used for editing and manipulating digital images. Before versions 7.1.2-16 and 6.9.13-41, the authorization check for the `path` domain occurred before the file was fully opened or used. This allowed a symlink swap to bypass read/write restrictions enforced by policy.
**Recommendations**
Update ImageMagick to version 7.1.2-16 or later.
Update ImageMagick to version 6.9.13-41 or later.