PT-2026-44708 · Canon · My Image Garden

Published 2026-05-28 · Updated 2026-05-29 · CVE-2026-6891

Positive Technologies (AI Summary)

CVSS v3.1

5.0

Medium

Base vector

AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions My Image Garden for macOS versions prior to 3.6.9

Description Improper handling of symbolic links in the installer allows a local attacker with login privileges to use a specially crafted symbolic link during installation to modify permissions of files for which they would not normally have authorization.

Fix

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

CVE-2026-6891

Affected Products

My Image Garden

References · 6

• https://canon.jp/support/support-info/260528-2vulnerability-response · Vendor Advisory
• https://psirt.canon/advisory-information/cp2026-004 · Vendor Advisory
• https://canon-europe.com/support/product-security · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-6891 · Security Note
• https://usa.canon.com/support/canon-product-advisories/CPA2026-004-Vulnerability-Remediation-for-My-Image-Garden-for-macOS-and-CUPS-Printer-Driver-for-macOS · Vendor Advisory
• https://t.me/cveNotify/165120 · Telegram Post