CVE-2026-108693

A flaw was found in ImageMagick. An insecure search path vulnerability allows a local attacker to achieve arbitrary code execution by placing a malicious executable into the application's working directory. When converting document formats such as PDF or PostScript on Windows systems without a registered Ghostscript installation, ImageMagick attempts to launch the external helper program by name without specifying a full path. This causes the application to run the untrusted binary with the privileges of the ImageMagick process.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.