CyberRota Analysis
AI-GeneratedImageMagick versions prior to 6.9.13-58 and 7.x before 7.1.2-33 are vulnerable due to improper handling of symbolic links in the IsRightsAuthorizedByName security policy check, enabling local attackers to bypass configured policy restrictions. This could allow unauthorized access to sensitive files or resources by exploiting symlinks. Organizations using affected versions should prioritize patching to mitigate potential security risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 does not properly account for symbolic links in the IsRightsAuthorizedByName security policy check, allowing configured policy restrictions to be bypassed. Local attackers who can create a symlink can point it at a policy-restricted path to evade the configured policy.