CVE-2026-25965 | ImageMagick up to 6.9.13-39/7.1.2-14 Image Parser file inclusion (GHSA-8jvj-p28h-9gm7)

A vulnerability has been found in ImageMagick up to 6.9.13-39/7.1.2-14 and classified as critical. The impacted element is an unknown function of the component Image Parser. This manipulation causes file inclusion.

This vulnerability is tracked as CVE-2026-25965. The attack is possible to be carried out remotely. No exploit exists.

The affected component should be upgraded.