The vulnerability in ImageMagick prior to version 7.1.2-26 involves a policy bypass in the APNG encoder and external delegates. Missing validation checks enable attackers with low privileges to bypass configured policy restrictions, allowing unauthorized file writes to disallowed paths. This issue is related to improper validation of file paths during the image encoding process, categorized as CWE-59. There is no vendor advisory or patch information available to confirm remediation status.

Attackers with limited privileges can exploit this vulnerability to write files to locations that should be restricted by ImageMagick's policy configurations. This could lead to unauthorized file creation or modification, potentially impacting system integrity or security depending on the environment and usage context. No known exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to ImageMagick usage to trusted users and environments. Monitor for updates from the vendor regarding patches or official mitigations.