Bing image search flaws let SVGs run commands as SYSTEM
This digest was compiled by AI from multiple sources — links to the originals are below.
XBOW, an autonomous security startup, found that crafted SVGs submitted to Bing's image search ran commands as NT AUTHORITY\SYSTEM on Microsoft's production servers. Microsoft issued two critical CVEs, CVE-2026-32194 and CVE-2026-32191, both rated 9.8 on the CVSS scale. The bugs were fixed server-side in March, with no customer action required.
The Vulnerability
The flaw resided in Bing's image processing tier, where a crafted SVG submitted via the 'Search by Image' upload or the crawler route could execute commands as SYSTEM on Windows workers or root on Linux machines. The SVG, a one-pixel XML file, referenced an image with a pipe character, causing the conversion suite to invoke a shell command instead of reading a filename. XBOW confirmed the issue across multiple hosts and network ranges, ruling out a single compromised machine.
Attack Vectors
Two attack routes were identified: CVE-2026-32194 via the public upload endpoint sending base64-encoded SVG in the imageBin field, and CVE-2026-32191 via the crawler that fetches images from user-provided URLs through the imgurl parameter. Neither required authentication, cookies, or user interaction. The blind SSRF in Bing's reverse image search, which returned a 500 error but still processed the fetched image, hinted at the downstream parsing issue.
Disclosure and Fix
XBOW reported both vulnerabilities privately to Microsoft. The company fixed them server-side before issuing advisories on March 19, with no patches for users. No exploitation or public disclosure was recorded at that time. XBOW published the exploit mechanics on July 23 after holding them back at Microsoft's request until the remediation was complete.
What's Next
Organizations using ImageMagick-compatible pipelines should review their delegate configurations and restrict accepted formats to prevent similar attacks. It remains unclear whether other image processing services face analogous risks from SVG parsing.
1 source
Bing image search flaws let SVGs run commands as SYSTEM
