CVE-2026-6891
CVSS Score
5.0
EPSS Score
0.0%
EPSS Percentile
3th
Improper handling of symbolic links in the installer of My Image Garden for macOS Version 3.6.8 or earlier may allow a local attacker with login privileges to exploit a specially crafted symbolic link during installation to modify permissions of files for which they would not normally have authorization.
| CWE | CWE-59 |
| Vendor | canon inc. |
| Product | my image garden for macos |
| Published | May 28, 2026 |
| Last Updated | May 29, 2026 |
Stay Ahead of the Next One
Get instant alerts for canon inc. my image garden for macos
Be the first to know when new medium vulnerabilities affecting canon inc. my image garden for macos are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
Required
Scope
Unchanged
Confidentiality
None
Integrity
High
Availability
None
Affected Versions
Canon Inc. / My Image Garden for macOS
3.6.8 or earlier
References
psirt.canon: https://psirt.canon/advisory-information/cp2026-004/ canon.jp: https://canon.jp/support/support-info/260528-2vulnerability-response usa.canon.com: https://www.usa.canon.com/support/canon-product-advisories/CPA2026-004-Vulnerability-Remediation-for-My-Image-Garden-for-macOS-and-CUPS-Printer-Driver-for-macOS canon-europe.com: https://www.canon-europe.com/support/product-security/