CVE-2026-109274

A flaw was found in ImageMagick. This vulnerability allows information disclosure by enabling a local attacker to bypass path security policies during the execution of a magick script. By exploiting a Time-of-Check to Time-of-Use TOCTOU race condition, an attacker can replace a validated file pat...