Crafted SVGs in Bing Image Search Allow SYSTEM Command Execution

Security research team XBOW disclosed a critical Bing Images vulnerability that allowed attackers to execute arbitrary system commands on Microsoft’s backend infrastructure by submitting crafted Scalable Vector Graphics (SVG) files. Tracked under CVE-2026-32194 alongside a secondary CVE, the flaw exposed core image-processing worker nodes across production environments.

Arbitrary Command Execution via SVG Image Processing

The vulnerability stems from improper input validation and unsafe parsing of vector graphics when submitted through Bing’s image search portal. When Bing ingests user-supplied image files for indexing, thumbnail generation, or visual search processing, embedded code or malformed XML structures within the SVG were parsed by backend processing workers running elevated privileges.

Because SVG is an XML-based image format, parser implementations that fail to strictly restrict external entity resolution, embedded script execution, or underlying system call invocation can be coerced into executing arbitrary commands. In this instance, submitting a specially crafted SVG payload yielded direct command execution on the target host.

Infrastructure Impact and Fleet-Wide Reach

During testing, researchers confirmed that command execution occurred at the highest privilege levels across both major operating system architectures hosting Microsoft’s image-processing fleet:

• Windows Workers: Commands executed under the NT AUTHORITY\SYSTEM security context.
• Linux Workers: Commands executed under the root account.

Testing across distinct host machines and network subnet ranges demonstrated that the flaw was not limited to an isolated sandbox or single misconfigured server. It resided universally across Bing’s production image-processing tier, creating a potential vector for internal network traversal or unauthorized data exposure from backend clusters.

Remediation and Mitigation

Microsoft addressed the underlying parsing flaws by updating server-side processing routines and enforcing strict sandbox boundaries around media-handling worker processes. Because the fix was deployed entirely on Microsoft’s infrastructure, no administrative action is required for end users. Organizations building custom SVG processing pipelines should ensure their parser libraries explicitly disable external entity resolution and run under unprivileged, isolated accounts.