#pillow

October 24, 2026

A filename alone triggers OS command execution in Pillow (CVE-2026-112900). Pillow passes EPS filenames unchecked to Ghostscript, which can read an attacker-chosen name as instructions — so upload endpoints that preserve or build stored filenames from user input are the target, not the file contents. Fixed in 13.0.0 (October 16), which also closes an FPX flaw shown to execute a command from a single Image.open() where olefile is installed; CISA's record marks a public PoC for the TIFF issue (The Hacker News). · Vulnerabilities & Exploits