CVE-2026-112900 · GHSA-w889-685w-c8fh
Pillow: Argument Injection in Ghostscript call, potentially leading into RCE
- Risk score
- 72/100
- CVSS
- 9.2 v4.0
- Exploit chance (30 days)
- 0.4%
- Published
- 19 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- Pillow has a vulnerability in its Ghostscript call, allowing argument injection, which could lead to remote code execution. An attacker could inject Ghostscript arguments by controlling the filename.
- Affected
- {'products': ['Pillow'], 'packages': ['Pillow'], 'versions': ['>= 2.6.0, < 13.0.0']}
- Fix
- Upgrade to version 13.0.0 or later
- Exploitation
- No known exploitation
In the news
TL;DR
Critical vulnerability in Pillow (Python imaging library) allows RCE via crafted image, affects versions 2.6.0 to 13.0.0.
- Pillow is a Python library used for image processing.
- The vulnerability allows attackers to execute code remotely without logging in.
- The vulnerability is rated CVSS 9.2 critical.
AI summary of 1 article.
Why it is Amber
- CVSS 9.2 critical
- Remotely exploitable without logging in
- On your watchlist: PyPI
Affected packages
| Package | Ecosystem | Vulnerable | Fixed in |
|---|---|---|---|
| Pillow | pip | >= 2.6.0, < 13.0.0 | 13.0.0 |
References
- https://github.com/advisories/GHSA-w889-685w-c8fh
- https://github.com/python-pillow/Pillow/security/advisories/GHSA-w889-685w-c8fh
- https://nvd.nist.gov/vuln/detail/CVE-2026-112900
- https://github.com/python-pillow/Pillow/commit/a2c363141da31a265dd536c945677db4b64f3ec9
- https://github.com/python-pillow/Pillow/releases/tag/13.0.0
- https://github.com/advisories/GHSA-w889-685w-c8fh
Original description
Pillow is a Python imaging library. From 2.6.0 until 13.0.0, Pillow is vulnerable to argument injection when invoking Ghostscript for EPS input. EpsImagePlugin.Ghostscript passes a caller-controlled input filename after -f without converting it to a safe absolute path, so a name beginning with a hyphen can be interpreted as a Ghostscript option. An attacker who controls the filename can inject Ghostscript arguments. Arbitrary command execution specifically requires a leading @ argument-file filename and control of the referenced text file containing additional Ghostscript arguments; the reported chain reproduces with the default -dSAFER invocation. This issue is fixed in version 13.0.0.
Last activity 19 Oct 2026. Patch Forecast updates every hour.