ImageMagick Path Policy Symlink Race Vulnerability Bypassing Authorization Checks

A vulnerability in ImageMagick prior to versions 7.1.2-16 and 6.9.13-41 allows for a symlink race attack that bypasses domain="path" authorization checks. The issue arises because the authorization is verified before the final file is opened or used, creating a window of opportunity for a malicious actor to swap a symlink and exploit policy-denied read or write operations.

Impact

Exploitation of this vulnerability could lead to unauthorized read or write access to files, bypassing ImageMagick's intended file handling policies.

Remediation

Users can upgrade to ImageMagick versions 7.1.2-16 or 6.9.13-41 to address this vulnerability.