A flaw was found in ImageMagick. A local attacker with permission to modify the security policy configuration file can bypass defined security restrictions by supplying an alternate XML document type declaration (DOCTYPE). Due to improper parsing of certain DOCTYPE declarations, the configuration parser consumes the remainder of the file and silently fails to load security rules. As a result, restricted or forbidden operations are permitted to execute.
Last checked: 2026-10-06 16:33 UTC
No exploitation evidence · CISA Coordinator (Assessed 2026-10-05 19:18 UTC)
Fix evidence last checked: 2026-10-05 19:02 UTC