Imagemagick Through 7.1.2 33 And 6.9.13 58 Uncontrolled Search Path Via Ghostscript Delegate

Back www.vulncheck.com

Imagemagick Through 7.1.2 33 And 6.9.13 58 Uncontrolled Search Path Via Ghostscript Delegate

www.vulncheck.com • October 11, 2026

Share: View original

ImageMagick through 7.1.2-33 and 6.9.13-58 Uncontrolled Path via Ghostscript Delegate

ImageMagick >= 7.0.0-0, = 7.0.0-0, <= 7.1.2-33

ImageMagick <= 6.9.13-58

ImageMagick <= 6.9.13-58

CWE-427 Uncontrolled Path Element

Ready to get Started?

Vulnerability Prioritization Prioritize vulnerabilities that matter based on the threat landscape and defer vulnerabilities that don't.

Early Warning System Real-time alerting of changes in the vulnerability landscape so that you can take action before the attacks start.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

High-Risk CVE-2026-108693 Vulnerability in ImageMagick Disclosed A high-risk vulnerability, CVE-2026-108693, has been identified in ImageMagick versions 7.1.2-33 and 6.9.13-58. This flaw allows attackers to exploit an uncontrolled path vulnerability in the Ghostscript delegate, enabling code execution through a malicious executable named gswin64c.exe. The vulnerability primarily affects Windows systems that utilize ImageMagick for processing PDF, PostScript, or EPS files. Attackers can plant a malicious executable in a writable directory, leading to potential unauthorized access to sensitive data. A proof-of-concept (PoC) has been made publicly available, but there is no confirmation of active exploitation in the wild at this time. Users are advised to review their conversion workflows and apply vendor patches as they become available. 1 sources 62

Extracted Entities

CWE Weaknesses (1)

CWE-427 - Uncontrolled Search Path Element

Platforms (2)

Ghostscript ImageMagick