Bug 2555889 (CVE-2026-112900)

Summary:	CVE-2026-112900 pillow: Pillow: Argument Injection in Ghostscript call, potentially leading into RCE
Product:	[Other] Security Response	Reporter:	OSIDB Bzimport <bzimport>
Component:	vulnerability	Assignee:	Product Security DevOps Team <prodsec-dev>
Status:	NEW ---	QA Contact:
Severity:	urgent	Docs Contact:
Priority:	urgent
Version:	unspecified	CC:	anthomas, dschmidt, ehelms, ggainey, jlanda, jpasqual, juwatts, kshier, mdellweg, mhulan, nmoumoul, osousa, pcreech, rbobbitt, rchan, rhel-process-autobot, simaishi, smallamp, stcannon, tmalecek, watson-tool-maintainers, yguenane
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	---
Doc Text:	A flaw was found in Pillow. This vulnerability may allow an attacker to achieve arbitrary code execution when processing Encapsulated PostScript (EPS) images. Because Pillow invokes the external Ghostscript utility without properly sanitizing user-controlled input filenames, names beginning with specific command prefixes are misinterpreted as options rather than file paths. An attacker who controls the filename and can supply an additional file containing command arguments can exploit this argument injection to execute arbitrary commands on the system.	Story Points:	---
Clone Of:		Environment:
Last Closed:		Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	2563443, 2563472, 2563474, 2563475, 2563478
Bug Blocks:

Description OSIDB Bzimport 2026-10-19 22:21:48 UTC

Pillow is a Python imaging library. From 2.6.0 until 13.0.0, Pillow is vulnerable to argument injection when invoking Ghostscript for EPS input. EpsImagePlugin.Ghostscript passes a caller-controlled input filename after -f without converting it to a safe absolute path, so a name beginning with a hyphen can be interpreted as a Ghostscript option. An attacker who controls the filename can inject Ghostscript arguments. Arbitrary command execution specifically requires a leading @ argument-file filename and control of the referenced text file containing additional Ghostscript arguments; the reported chain reproduces with the default -dSAFER invocation. This issue is fixed in version 13.0.0.

Comment 1 Jon Orris 2026-10-30 19:18:54 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2026:93077 https://access.redhat.com/errata/RHSA-2026:93077