CVE-2026-106580— ImageMagick: Policy Bypass in CUT encoder
Quick assessment
Affected
ImageMagick ImageMagick
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
ImageMagick 是一款免费且开源的软件，用于编辑和操作数字图像。在版本 7.1.2-31 和 6.9.13-56 之前，CUT 编码器的安全策略检查存在缺失，这使得构造的本地编码操作可以读取策略应当禁止访问的数据，并可能导致程序崩溃。该问题已在版本 7.1.2-31 和 6.9.13-56 中得到修复。
Possible ATT&CK Techniques 2 AI
T1210 · Exploitation of Remote Services T1059 · Command and Scripting Interpreter
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-106580
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
ImageMagick: Policy Bypass in CUT encoder
Source: CVE Program / CVE List V5
Vulnerability Description
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, a missing security-policy check in the CUT encoder allows a crafted local encoding operation to read data that policy should deny and can also cause a crash. This issue is fixed in versions 7.1.2-31 and 6.9.13-56.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
访问控制不恰当
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| ImageMagick | ImageMagick | < 6.9.13-56 | - |
|
II. Public POCs for CVE-2026-106580
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-106580
请登录查看更多情报信息。
Other References for CVE-2026-106580 (5)
-
https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-31 x_refsource_MISC
-
https://github.com/ImageMagick/ImageMagick6/releases/tag/6.9.13-56 x_refsource_MISC
Same Patch Batch · ImageMagick · 2026-10-07 · 20 CVEs total
| CVE-2026-106579 | 6.2 MEDIUM | ImageMagick: Policy Bypass when using coder as the domain. |
| CVE-2026-107209 | 5.9 MEDIUM | ImageMagick: Use-After-Free in RSVG decoder that is build without cairo support |
| CVE-2026-106567 | 5.9 MEDIUM | ImageMagick: Infinite Loop in PSD decoder on 32-bit builds |
| CVE-2026-106578 | 5.9 MEDIUM | ImageMagick: Invalid Memory Free in MVG decoder |
| CVE-2026-106565 | 5.9 MEDIUM | ImageMagick: Infinite Loop in bzip2 compressed images. |
| CVE-2026-106569 | 5.3 MEDIUM | ImageMagick: Denial of service in ASE decoder because of missing security checks |
| CVE-2026-107210 | 5.3 MEDIUM | ImageMagick: Policy Bypass in MAT decoder when reading highly compressed data |
| CVE-2026-107208 | 5.3 MEDIUM | ImageMagick: Denial of service with crafted XMP profile |
| CVE-2026-106572 | 5.3 MEDIUM | ImageMagick: Stack Overflown CALS decoder due to missing depth check. |
| CVE-2026-106573 | 5.3 MEDIUM | ImageMagick: Denial of service in MVG decoder |
| CVE-2026-106568 | 5.3 MEDIUM | ImageMagick: Infinite Loop when reading a crafted XMP profile |
| CVE-2026-106577 | 5.3 MEDIUM | ImageMagick: Code Injection in the postscript coders |
| CVE-2026-106575 | 5.3 MEDIUM | ImageMagick: Unclosed file pointer in magick script |
| CVE-2026-106576 | 5.3 MEDIUM | ImageMagick: Denial of service possible when parsing an XMP profile. |
| CVE-2026-106574 | 5.3 MEDIUM | ImageMagick: Heap Buffer Over-Write in distributed pixel cache server will result in a cra |
| CVE-2026-106564 | 5.3 MEDIUM | ImageMagick: Heap Buffer Over-Write in EXR decoder |
| CVE-2026-106571 | 5.1 MEDIUM | ImageMagick: Heap Buffer Over-Write in GetVirtualPixels api will result in a crash |
| CVE-2026-106570 | 4.3 MEDIUM | ImageMagick: Denial of service in distributed pixel cache server |
| CVE-2026-106566 | 4.0 MEDIUM | ImageMagick: Policy Bypass in delegate symlink cleanup due to missing check |
IV. Related Vulnerabilities
Same product: ImageMagick
-
CVE-2026-107210
ImageMagick: Policy Bypass in MAT decoder when reading highl -
CVE-2026-107209
ImageMagick: Use-After-Free in RSVG decoder that is build wi -
CVE-2026-107208
ImageMagick: Denial of service with crafted XMP profile -
CVE-2026-106579
ImageMagick: Policy Bypass when using coder as the domain. -
CVE-2026-106578
ImageMagick: Invalid Memory Free in MVG decoder
Same vendor: ImageMagick
-
CVE-2026-107210
ImageMagick: Policy Bypass in MAT decoder when reading highl -
CVE-2026-107209
ImageMagick: Use-After-Free in RSVG decoder that is build wi -
CVE-2026-107208
ImageMagick: Denial of service with crafted XMP profile -
CVE-2026-106579
ImageMagick: Policy Bypass when using coder as the domain. -
CVE-2026-106578
ImageMagick: Invalid Memory Free in MVG decoder
Same weakness: CWE-284
-
CVE-2026-76463
Cisco Meraki Security Hardening Release: October 2026 - Impr -
CVE-2026-76498
Cisco Application Policy Infrastructure Controller Hardening -
CVE-2026-76455
Cisco NX-OS Software Security Hardening Release: October 202 -
CVE-2026-20038
Cisco Nexus 9000 Series Fabric Switches in ACI Mode Policy-B -
CVE-2026-107175
MISP Correlation Engine Fails to Refresh When Event Distribu
V. Comments for CVE-2026-106580
No comments yet