CVE-2026-112900: Pillow: Argument Injection in Ghostscript call, potentially leading into RCE

October 21, 2026

PIL.EpsImagePlugin.Ghostscript() builds the Ghostscript command line using the input file path (fp.name) without sanitization, placing it at -f <infile>. A filename beginning with - is interpreted by Ghostscript as an option, giving command-line argument injection; chainable to RCE (see Impact). Reproduces with Pillow’s default invocation (with -dSAFER enabled).

References

github.com/advisories/GHSA-w889-685w-c8fh
github.com/python-pillow/Pillow/commit/a2c363141da31a265dd536c945677db4b64f3ec9
github.com/python-pillow/Pillow/releases/tag/13.0.0
github.com/python-pillow/Pillow/security/advisories/GHSA-w889-685w-c8fh
nvd.nist.gov/vuln/detail/CVE-2026-112900

Code Behaviors & Features

Detect and mitigate CVE-2026-112900 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →