CVE-2026-112900
published 2026-10-19CVE-2026-112900: Pillow is a Python imaging library. From 2.6.0 until 13.0.0, Pillow is vulnerable to argument injection when invoking Ghostscript for EPS input…
PriorityP261critical9.2CVSS 4.0
AVNACLATPPRNUINVCHVIHVAHSCNSINSANEXCRXIRXARXMAVXMACXMATXMPRXMUIXMVCXMVIXMVAXMSCXMSIXMSAXSXAUXRXVXREXUX
EPSS
1.06%
64.4th percentile
Pillow is a Python imaging library. From 2.6.0 until 13.0.0, Pillow is vulnerable to argument injection when invoking Ghostscript for EPS input. EpsImagePlugin.Ghostscript passes a caller-controlled input filename after -f without converting it to a safe absolute path, so a name beginning with a hyphen can be interpreted as a Ghostscript option. An attacker who controls the filename can inject Ghostscript arguments. Arbitrary command execution specifically requires a leading @ argument-file filename and control of the referenced text file containing additional Ghostscript arguments; the reported chain reproduces with the default -dSAFER invocation. This issue is fixed in version 13.0.0.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| python-pillow | pillow | — | — |
| python | pillow | >= 2.6.0 < 13.0.0 | 13.0.0 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
Pillow: Argument Injection in Ghostscript call, potentially leading into RCE
ghsa·2026-10-21
CVE-2026-112900 [CRITICAL] CWE-78 Pillow: Argument Injection in Ghostscript call, potentially leading into RCE
Pillow: Argument Injection in Ghostscript call, potentially leading into RCE
### Summary
`PIL.EpsImagePlugin.Ghostscript()` builds the Ghostscript command line using the input file path (`fp.name`) **without sanitization**, placing it at `-f `. A filename beginning with `-` is interpreted by Ghostscript as an option, giving command-line argument injection; chainable to RCE (see Impact). Reproduces with Pillow's default invocation (with `-dSAFER` enabled).
### Details
_Give all details on the vulnerability. Pointing to the incriminated source code is very helpful for the maintainer._
#### Type
CWE-88 (Argument Injection) (→ CWE-78 (OS Command Injection) optionally, with attacker controlled text file)
#### Vulnerable Codes
```python
infile_temp = None
if hasattr(fp, "name") and os.path.
VulDB
python-pillow Pillow up to 12.x EPS Ghostscript Integration EpsImagePlugin.py EpsImagePlugin.Ghostscript filename argument injection
vuldb·2026-10-20·CVSS 9.2
CVE-2026-112900 [CRITICAL] python-pillow Pillow up to 12.x EPS Ghostscript Integration EpsImagePlugin.py EpsImagePlugin.Ghostscript filename argument injection
A vulnerability was found in python-pillow Pillow up to 12.x and classified as problematic. This impacts the function EpsImagePlugin.Ghostscript of the file EpsImagePlugin.py of the component EPS Ghostscript Integration. Such manipulation of the argument filename leads to argument injection.
This vulnerability is uniquely identified as CVE-2026-112900. The attack can be launched remotely. No exploit exists.
It is suggested to upgrade the affected component.
No detection rules found.
No public exploits indexed.
Hackernews
⚡ Weekly Recap: This2Shell, That2Shell, Everything's an RCE? Rogue AI, Supply Chain Chaos and More
blogs_hackernews·2026-10-26·CVSS 9.8
CVE-2026-109618 [CRITICAL] ⚡ Weekly Recap: This2Shell, That2Shell, Everything's an RCE? Rogue AI, Supply Chain Chaos and More
Home
Threat Intelligence
Vulnerabilities
Cyber Attacks
Webinars
Expert Insights
Awards
Webinars
Awards
Free eBooks
About THN
Jobs
Advertise with us
## ⚡ Weekly Recap: This2Shell, That2Shell, Everything's an RCE? Rogue AI, Supply Chain Chaos and More
This2Shell, That2Shell, Everything2Shell. That's pretty much how the last week went. Critical bugs that let attackers run code remotely are showing up everywhere. Hackers are scanning for targets, some flaws are already being used in attacks, and security teams have more urgent patches than they can keep up with.
And that's not even the full story. A leaked key led to a software supply-chain attack. AI agents are being tricked into following harmful instructions. Old bugs are still being used to break into systems, and some att
Hackernews
Critical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted Image
blogs_hackernews·2026-10-23·CVSS 9.2
CVE-2026-112900 [CRITICAL] Critical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted Image
Home
Threat Intelligence
Vulnerabilities
Cyber Attacks
Webinars
Expert Insights
Awards
Webinars
Awards
Free eBooks
About THN
Jobs
Advertise with us
## Critical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted Image
Pillow , the most widely used image library for Python, can be made to run operating system commands on a server by specifying the name of a file it is told to open.
The flaw, CVE-2026-112900 , is in the way Pillow handles EPS images, which it opens by passing the file's name to Ghostscript , a separate program it runs to turn the image into pixels, without checking the name first.
Ghostscript can read a name chosen by an attacker as instructions rather than as a file, and point it to a second file that carries commands to run.
2026-10-19
Published