Bing Image Crawler Executes Attacker-Hosted SVG as SYSTEM
Bing's crawler fetches attacker-hosted SVGs via imgurl and processes them as SYSTEM. CVE-2026-32191 (CVSS 9.8) is patched server-side by Microsoft.
- Vendor
- Microsoft
- Product
- Bing Image Processing Infrastructure
- CVSS
- 9.8
- EPSS (exploit probability)
- N/A
- Status
- patched
- Published
Bing’s image crawler fetched attacker-supplied SVG content via the imgurl parameter and processed it using ImageMagick’s delegate system, which shells out to external programs for certain formats. A pipe character in the image path reached that shell as a command separator, executing arbitrary commands as NT AUTHORITY\SYSTEM on Windows workers and as root on Linux workers in the same fleet.
The attack required no authentication. The attacker hosts a crafted SVG at an external URL, submits it via the imgurl parameter, and bingbot/2.0 fetches and processes it — running the attacker’s command in the image worker’s execution context. XBOW confirmed this across workers at multiple hosts and network ranges.
Microsoft fixed the issue server-side before its March 19, 2026 advisory. Public disclosure came July 23, 2026 via the XBOW research writeup. No end-user action is required. See also: companion upload-path vulnerability CVE-2026-32194.
