Argument injection in Pillow - CVE-2026-112900

Vulnerability details

The vulnerability allows a remote attacker to inject Ghostscript command-line arguments and potentially execute arbitrary operating system commands.

The vulnerability exists due to improper neutralization of filename-derived command-line arguments in Pillow's PIL.EpsImagePlugin.Ghostscript() function when rendering EPS images with attacker-controlled filenames. A remote attacker can supply a filename beginning with - or -- to inject an option, or use a filename such as @arg to load additional arguments from a referenced file and execute arbitrary operating system commands if that file is also attacker-controlled.

The issue is reproducible with Pillow's default Ghostscript invocation, including when -dSAFER is enabled.

Affected software

How to mitigate CVE-2026-112900

External References

• https://github.com/python-pillow/Pillow/security/advisories/GHSA-w889-685w-c8fh

Related Security Bulletins

• Multiple vulnerabilities in Pillow
• Fedora 43 update for python-pillow