{"id":12220,"date":"2026-10-23T06:50:29","date_gmt":"2026-10-23T12:50:29","guid":{"rendered":"https:\/\/beaconlab.us\/publicacion\/alert-2026-122-critical-vulnerability-in-pillow-for-python\/"},"modified":"2026-10-23T06:51:33","modified_gmt":"2026-10-23T12:51:33","slug":"alert-2026-122-critical-vulnerability-in-pillow-for-python","status":"publish","type":"publicacion","link":"https:\/\/beaconlab.us\/en\/publication\/alert-2026-122-critical-vulnerability-in-pillow-for-python\/","title":{"rendered":"Alert 2026-122 Critical vulnerability in Pillow for Python"},"content":{"rendered":"\n

Affected product(s):\u00a0<\/h2>\n\n
Product<\/strong><\/td>Affected versions<\/strong><\/td><\/tr>
Pillow (pip package)<\/strong><\/td>From 2.6.0 through 12.3.0 (earlier than 13.0.0)<\/td><\/tr><\/tbody><\/table><\/figure>\n\n

Affects only systems with Ghostscript (gs<\/code>) installed where the application opens EPS images with an attacker-controlled filename.<\/p>\n\n

Description<\/h2>\n\n

An argument injection vulnerability has been disclosed in Pillow, the Python image-processing library, identified as CVE-2026-112900 (CVSSv4 9.2 – CRITICAL). An attacker who controls the filename passed to Image.open()<\/code> can inject arguments into the Ghostscript command line when processing EPS images and, under certain conditions, execute arbitrary commands on the system.<\/p>\n\n

The flaw is in the Ghostscript()<\/code> function of the EpsImagePlugin<\/code> module, which builds the Ghostscript command by placing the input file path after -f<\/code> without validating it or converting it to an absolute path. A filename beginning with -<\/code> is interpreted by Ghostscript as an option. A filename in the format @<path><\/code> causes Ghostscript to read additional arguments from that file; if the attacker also controls its contents, they can escalate to command execution.<\/p>\n\n

The issue originates in the filename rather than its contents, so a legitimate EPS file can also trigger it. The attack works with Pillow’s default invocation, which includes Ghostscript’s -dSAFER<\/code> option. The advisory includes a public proof of concept that executes commands on the system. As of the date of this bulletin, no active exploitation is known, and the CVE is not listed in CISA’s KEV catalog.<\/p>\n\n

Mitigation<\/h2>\n\n

If it is not possible to update immediately, Pillow’s security policy recommends:<\/p>\n\n