Recommended action window: Monitor and triage in normal cycle
NVD description
Pillow is a Python imaging library. From 2.6.0 until 13.0.0, Pillow is vulnerable to argument injection when invoking Ghostscript for EPS input. EpsImagePlugin.Ghostscript passes a caller-controlled input filename after -f without converting it to a safe absolute path, so a name beginning with a hyphen can be interpreted as a Ghostscript option. An attacker who controls the filename can inject Ghostscript arguments. Arbitrary command execution specifically requires a leading @ argument-file filename and control of the referenced text file containing additional Ghostscript arguments; the reported chain reproduces with the default -dSAFER invocation. This issue is fixed in version 13.0.0.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
🛑 A filename is enough to trigger OS command execution in Python's widely used Pillow image library. CVE-2026-112900 abuses how Pillow passes EPS filenames to Ghostscript. What you need to know ↓ https://thehackernews.com/2026/10/critical-flaw-in-pythons-popular-pillow.html
ثغرة حرجة في مكتبة Pillow لبايثون (CVE-2026-112900) تسيء استخدام طريقة تمرير Pillow لأسماء ملفات EPS إلى Ghostscript، ما يتيح تنفيذ أوامر نظام التشغيل بمجرد اسم ملف. مطورو Python المستخدمون Pillow: حدّثوا فوراً.
Pillow, Python's most used image library (~436M downloads a month), fixed three CVSS 9.2 flaws in 13.0.0. Worst is CVE-2026-112900: an attacker-chosen EPS filename can inject Ghostscript args and run commands. Versions 2.6.0 to 12.3.0 hit. No exploitation seen yet #Python https://t.co/KgRG2ey2Q3
Long night and a long day as well. https://cloud.google.com/blog/products/identity-security/responding-to-core-php-vulnerabilities-cve-2026-109618-cve-2026-109619 and https://www.ox.security/blog/three-critical-pillow-cves-rce-and-heap-overflows-in-pythons-imaging-library-cve-2026-112900-cve-2026-112393-cve-2026-112403/