CVE-2026-56377

A flaw in ImageMagick’s policy enforcement allows remote attackers to bypass path restrictions within sandboxed conversion services. By circumventing these controls, an attacker can create or truncate files outside permitted security boundaries, leading to unauthorized file manipulation.

This flaw in ImageMagick has a Low impact, allowing remote attackers to bypass path policy restrictions within sandboxed conversion services. This could lead to the creation or truncation of files outside of intended boundaries, potentially affecting data integrity in specific configurations where ImageMagick processes untrusted input in a sandboxed environment.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this use OS-level controls like SELinux, AppArmor, or container restrictions to strictly confine ImageMagick's write permissions. Restrict the process so it can only write to specific temporary or input directories, preventing unauthorized system file changes.