CVE-2026-6891: Medium severity Canon My Image Garden for macOS vulnerability
Improper handling of symbolic links in the installer of My Image Garden for macOS Version 3.6.8 or earlier may allow a local attacker with login privileges to exploit a specially crafted symbolic link during installation to modify permissions of files for which they would not normally have authorization.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-6891?
CVE-2026-6891 has a medium severity rating of 5.
How do I fix CVE-2026-6891?
To mitigate CVE-2026-6891, update Canon My Image Garden to version 3.6.9 or later as recommended by Canon.
What type of vulnerability is CVE-2026-6891?
CVE-2026-6891 is an improper handling of symbolic links vulnerability in the installer of My Image Garden for macOS.
What could a local attacker achieve by exploiting CVE-2026-6891?
A local attacker could exploit CVE-2026-6891 to modify file permissions for files they would not typically have access to.
Which version of My Image Garden is affected by CVE-2026-6891?
CVE-2026-6891 affects My Image Garden for macOS version 3.6.8 and earlier.