CVE-2026-116145

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 6.9.13-58 ImageMagick versions prior to 7.1.2-32

Description A security policy bypass exists due to an incomplete fix for a previously reported issue. An attacker who can provide input to the software can evade configured security policy restrictions, enabling operations that the policy was designed to block.

Recommendations Update to version 6.9.13-58 or later. Update to version 7.1.2-32 or later.