CVE-2026-112900
Pillow: Argument Injection in Ghostscript call, potentially leading into RCE
PIL.EpsImagePlugin.Ghostscript() builds the Ghostscript command line using the input file path (fp.name) without sanitization, placing it at -f <infile>. A filename beginning with - is interpreted by Ghostscript as an option, giving command-line argument injection; chainable to RCE (see Impact). Reproduces with Pillow's default invocation (with -dSAFER enabled).
- python-pillow Pillow
- Critical
- CVSS 9.2
- EPSS 0.43%
- Fixed version listed
What to do
Fixed version listed
Affected products
| Product | Affected | Fixed in |
|---|---|---|
| python-pillow Pillow | >= 2.6.0, < 13.0.0 | None listed |
Affected packages
| Package | Affected | Fixed in | Advisory |
|---|---|---|---|
| Pillow (PyPI) | >= 2.6.0, < 13.0.0 | 13.0.0 | GHSA-w889-685w-c8fh |
Scores and signals
- Exploitation
- No known exploitation
- Severity
- Critical, CVSS 9.2 (v4.0, scored by GitHub)
- EPSS
- 0.43% chance of exploitation in the next 30 days (EPSS from FIRST, as of Oct 23, 2026)
- CISA's SSVC decision points
- Exploitation: none. Automatable: yes. Technical impact: total. As of Oct 20, 2026.
- Weakness
- CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'); CWE-88: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')
- Vendor
- python-pillow, Pillow
Timeline
- GitHub published advisory GHSA-w889-685w-c8fh (critical). Fixed in 13.0.0.