CVE-2026-47165

MEDIUM4.1

ImageMagick: Information Disclosure in distributed pixel cache server because it is not using a challenge–response authentication model

Published: 5/22/2026Modified: 5/31/2026

Description

The distributed pixel cache was originally designed to operate without a challenge–response authentication model. However, given today’s heightened security expectations, we have changed our implementation.

Affected packages (18)

CVSS scores

SourceVersionSeverityVector
osvCVSS 3.1MEDIUM4.1CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N

References (3)