Fluid Attacks Database

Description

ImageMagick has a Path Policy TOCTOU symlink race bypass domain="path" authorization is checked before final file open/use. A symlink swap between check-time and use-time bypasses policy-denied read/write.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
nuget	magick.net-q16-x86	>=0 <14.10.4	14.10.4
nuget	magick.net-q16-anycpu	>=0 <14.10.4	14.10.4
nuget	magick.net-q16-hdri-anycpu	>=0 <14.10.4	14.10.4
nuget	magick.net-q16-openmp-x86	>=0 <14.10.4	14.10.4
nuget	magick.net-q8-arm64	>=0 <14.10.4	14.10.4
nuget	magick.net-q16-hdri-openmp-x64	>=0 <14.10.4	14.10.4
nuget	magick.net-q16-hdri-x64	>=0 <14.10.4	14.10.4
nuget	magick.net-q8-openmp-x64	>=0 <14.10.4	14.10.4
nuget	magick.net-q16-hdri-arm64	>=0 <14.10.4	14.10.4
nuget	magick.net-q16-hdri-x86	>=0 <14.10.4	14.10.4

1-10 of 25

Aliases

1. CVE-2026-286892. NVD-2026-286893. OSV-2026-286894. OSV-DEBIAN-2026-286895. GHSA-493f-jh8w-qhx36. GCVE-2026-286897. SECURITY-TRACKER-CVE-2026-28689

References

1. https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-493f-jh8w-qhx32. https://github.com/dlemstra/Magick.NET/releases/tag/14.10.4