CVE-2026-112900
Pillow is a Python imaging library. From 2.6.0 until 13.0.0, Pillow is ...
Severity by source
Trivy's own label is CRITICAL. Rated critical by GHSA, Bitnami.
Description
Pillow is a Python imaging library. From 2.6.0 until 13.0.0, Pillow is vulnerable to argument injection when invoking Ghostscript for EPS input. EpsImagePlugin.Ghostscript passes a caller-controlled input filename after -f without converting it to a safe absolute path, so a name beginning with a hyphen can be interpreted as a Ghostscript option. An attacker who controls the filename can inject Ghostscript arguments. Arbitrary command execution specifically requires a leading @ argument-file filename and control of the referenced text file containing additional Ghostscript arguments; the reported chain reproduces with the default -dSAFER invocation. This issue is fixed in version 13.0.0.
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| bitnami::Bitnami Vulnerability Database | pillow | 13.0.0 |
| pip::GitHub Security Advisory pip | pillow | 13.0.0 |
| chainguard | apache-beam-python-3.12-sdk, nemo-gym, nemo-rl-cuda-13.0 and 6 more | 2.77.0-r5 and 8 more |
| debian 11 | pillow | no fix listed |
| debian 12 | pillow | no fix listed |
| debian 13 | pillow | no fix listed |
| debian 14 | pillow | no fix listed |
| echo | pillow | no fix listed |
| echo pip::Echo OSV | pillow | 12.3.0+echo.1 |
| rapidfort amazon linux 2023 | python-pillow | no fix listed |
| rapidfort debian 12 | pillow | 0:13.0.0-1 |
| rapidfort debian 13 | pillow | 0:13.0.0-1 |
Show all 24 entries from 14 sources
| Source | Package | Fixed in |
|---|---|---|
| bitnami::Bitnami Vulnerability Database | pillow | 13.0.0 |
| pip::GitHub Security Advisory pip | pillow | 13.0.0 |
| chainguard | apache-beam-python-3.12-sdk | 2.77.0-r5 |
| chainguard | nemo-gym | 0.5.0_rc0_git20260729-r6 |
| chainguard | nemo-rl-cuda-13.0 | 0.7.0-r11 |
| chainguard | nemo-skills | 0.7.0_git20260911-r5 |
| chainguard | open-webui | 0.12.3-r6 |
| chainguard | openstack-horizon-2025.2 | 25.5.2_git20260914-r12 |
| chainguard | py3-pillow | 13.0.0-r0 |
| chainguard | py3-pytorch-cuda-13.0 | 2.14.1-r2 |
| chainguard | superset-fips-6.1 | 6.1.0-r11 |
| debian 11 | pillow | no fix listed |
| debian 12 | pillow | no fix listed |
| debian 13 | pillow | no fix listed |
| debian 14 | pillow | no fix listed |
| echo | pillow | no fix listed |
| echo pip::Echo OSV | pillow | 12.3.0+echo.1 |
| rapidfort amazon linux 2023 | python-pillow | no fix listed |
| rapidfort debian 12 | pillow | 0:13.0.0-1 |
| rapidfort debian 13 | pillow | 0:13.0.0-1 |
| seal pip::Seal Security Database | pillow | 10.0.1+sp999, 7.2.0+sp999, 9.3.0+sp999, 9.5.0+sp999 |
| seal pip::Seal Security Database | seal-pillow | 10.0.1+sp999, 7.2.0+sp999, 9.3.0+sp999, 9.5.0+sp999 |
| wolfi | open-webui | 0.12.3-r6 |
| wolfi | py3-pillow | 13.0.0-r0 |
References
- https://advisory.echohq.com/cve/CVE-2026-112900
- https://getsafety.com/v/SFTY-20261021-11431/52d
- https://github.com/python-pillow/Pillow
- https://github.com/python-pillow/Pillow/commit/a2c363141da31a265dd536c945677db4b64f3ec9
- https://github.com/python-pillow/Pillow/releases/tag/13.0.0
- https://github.com/python-pillow/Pillow/security/advisories/GHSA-w889-685w-c8fh
- https://nvd.nist.gov/vuln/detail/CVE-2026-112900