Search: CVE-2026-56377

CVE-2026-56377 is a path traversal vulnerability in ImageMagick versions before 7.1.2-24. The flaw arises from an incorrect policy check that allows attackers to bypass pathname restrictions in sandboxed conversion services. This enables remote attackers with limited privileges to create or truncate files outside the intended directories, violating security policies.