ImageMagick: Policy Bypass in script operation due to missing checks

LOW 3.3CVE-2026-61859 · GHSA-vghg-5jrg-2398 · Published 15/07/2026 · updated 29/10/2026

Package	Affected versions	Patched versions
Magick.NET-Q16-AnyCPU NuGet	`< 14.15.0`	`14.15.0`
Magick.NET-Q16-HDRI-AnyCPU NuGet	`< 14.15.0`	`14.15.0`
Magick.NET-Q16-HDRI-OpenMP-arm64 NuGet	`< 14.15.0`	`14.15.0`
Magick.NET-Q16-HDRI-arm64 NuGet	`< 14.15.0`	`14.15.0`
Magick.NET-Q16-HDRI-x64 NuGet	`< 14.15.0`	`14.15.0`
Magick.NET-Q16-HDRI-x86 NuGet	`< 14.15.0`	`14.15.0`
Magick.NET-Q16-OpenMP-arm64 NuGet	`< 14.15.0`	`14.15.0`
Magick.NET-Q16-OpenMP-x64 NuGet	`< 14.15.0`	`14.15.0`
Magick.NET-Q16-arm64 NuGet	`< 14.15.0`	`14.15.0`
Magick.NET-Q16-x64 NuGet	`< 14.15.0`	`14.15.0`
Magick.NET-Q16-x86 NuGet	`< 14.15.0`	`14.15.0`
Magick.NET-Q8-AnyCPU NuGet	`< 14.15.0`	`14.15.0`
Magick.NET-Q8-OpenMP-arm64 NuGet	`< 14.15.0`	`14.15.0`
Magick.NET-Q8-OpenMP-x64 NuGet	`< 14.15.0`	`14.15.0`
Magick.NET-Q8-arm64 NuGet	`< 14.15.0`	`14.15.0`
Magick.NET-Q8-x64 NuGet	`< 14.15.0`	`14.15.0`
Magick.NET-Q8-x86 NuGet	`< 14.15.0`	`14.15.0`
imagemagick imagemagick	`≥ 6.9.13-0, < 6.9.13-51≥ 7.0.0-0, < 7.1.2-26`	`6.9.13-517.1.2-26`

Description

The -script operation is missing policy checks and that could result in both reading from paths disallowed by the security policy.

NVD description

ImageMagick before 7.1.2-26 and 6.9.13-x before 6.9.13-51 contains a policy bypass vulnerability in the -script operation due to missing security policy checks. This allows reading files from paths that are otherwise disallowed by the configured security policy.

References

ImageMagick/ImageMagick security advisory · WEB
ImageMagick/ImageMagick · PACKAGE
dlemstra/Magick.NET release 14.15.0 · WEB
vulncheck.com/advisories/imagemagick-before-26-policy-bypass-via-script-operation · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free