CVE-2026-46693

A flaw was found in ImageMagick. An attacker able to connect to a magick -distribute-cache service could exploit a race condition to hijack a file descriptor in the server process. This could lead to unauthorized access to sensitive information.

This flaw is rated as Low impact. It requires an attacker to have high privileges and the ability to connect to a magick -distribute-cache service. Exploitation is further limited by the high attack complexity and a race condition, making it difficult to reliably hijack a file descriptor for information disclosure. This service is not typically enabled or exposed by default in Red Hat products.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.