CVE-2026-6891

Vulnerability

My Image Garden for macOS prior to version 3.6.8a contains an improper handling of symbolic links in its installer [1]. This vulnerability exists because the installer does not properly validate symbolic links during the installation process. The affected versions are 3.6.8 and earlier. The issue is present when a local user runs the installer, and a specially crafted symbolic link is placed in a location that the installer accesses.

Exploitation

To exploit this vulnerability, an attacker must have local login privileges on the macOS system [1]. During the installation of My Image Garden, the attacker can create a malicious symbolic link targeting a file or directory they do not normally have permission to modify. The installer, lacking proper validation, follows the symbolic link and changes the permissions of the target according to the installer's intended actions, thereby allowing the attacker to gain unauthorized permission changes.

Impact

A successful exploit allows the local attacker to modify the permissions of files or directories for which they would not normally have authorization [1]. This could lead to unauthorized access, privilege escalation, or tampering with system files, depending on the target chosen by the attacker.

Mitigation

Canon has released an updated version of My Image Garden for macOS, version 3.6.8a, which fixes this vulnerability [1]. Users are strongly recommended to download and install the latest version from the official software download page. No workarounds are mentioned in the available reference.