CyberRota Analysis
AI-GeneratedImageMagick versions prior to 7.1.2-32 are vulnerable to a time-of-check time-of-use symlink race condition, which can allow attackers to circumvent path security policies while executing magick scripts. This vulnerability enables unauthorized file access, potentially exposing sensitive data that should be protected. Organizations using ImageMagick for image processing should prioritize patching this vulnerability to mitigate the risk of unauthorized file access.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
ImageMagick before 7.1.2-32 contains a time-of-check time-of-use symlink race vulnerability that allows attackers to bypass the path security policy when executing a magick script. Attackers can swap a checked path with a symlink during script execution to read files that the security policy is meant to block.