Pillow 13.0.0 fixes critical image-handling flaws, including EPS code execution
Original title: Critical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted Image
CVE-2026-112900 affects Pillow 2.6.0 through 12.3.0 when Ghostscript is installed; none of the flaws is known to be under attack.
Pillow, a widely used Python image library, can run operating system commands when an attacker controls the filename passed to Ghostscript while opening an EPS image, tracked as CVE-2026-112900. Maintainers fixed it and other issues in Pillow 13.0.0, released October 16. The batch also includes JPEG overflow flaws and a TIFF buffer overflow present since 2013. None of the flaws is known to be under attack. GitHub CVE records score several at 9.2, while maintainers rate the set from moderate to critical.
Unconfirmed: CVE scores rate several flaws 9.2, while maintainers rate the EPS issue moderate because the attacker must control the filename.
- OX Security estimates about 436 million Pillow downloads a month.
- The EPS issue needs the gs program and an attacker-controlled filename, not malicious image content.
- A FlashPix JPEG flaw can run a command from Image.open() if olefile is installed.
- CVE-2026-112403 is reported as a crash when thumbnailing a crafted lossless JPEG.
- CVE records note a public proof of concept for the TIFF flaw and none known for EPS.
Impact: OS command execution via a crafted filename or image
| Product | Affected | Fixed in |
|---|---|---|
| Pillow | 2.6.0 up to 12.3.0 for the EPS flaw | 13.0.0 |
- 1.Upgrade to Pillow 13.0.0 and rebuild containers, wheels, or base images that bundle older copies.
- 2.On Python 3.10, move to Python 3.11 or newer before installing Pillow 13.
- 3.Until upgraded, keep Ghostscript off hosts that process untrusted uploads and avoid attacker-controlled EPS filenames.
- Vendors
- Pillow
- Products
- Ghostscript
- Organizations
- OX SecurityCISAAnthropicAda Logics
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2026-112900+2 related CVEs | Ghostscript argument injection in Pillow EPS handling | 9.2 | 1% | PoC ×4 |
From the original article
3 min read at thehackernews.com
Pillow, the most widely used image library for Python, can be made to run operating system commands on a server by specifying the name of a file it is told to open. The flaw, CVE-2026-112900, is in the way Pillow handles EPS images, which it opens by passing the file's name to Ghostscript, a separate program it runs to turn the image into pixels, without checking the name first.
thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.