Skip to content
OpenAdvisories
Critical · 9.2 Public exploit CVE-2026-112900 BIT-pillow-2026-112900EUVD-2026-104661GHSA-w889-685w-c8fh

Pillow: Argument Injection in Ghostscript call, potentially leading into RCE

Published Oct 19, 2026 · Updated Oct 20, 2026 · Assigned by GitHub_M

Vendor: python-pillow Product: Pillow Package: open-webui Package: pillow Package: pillow Package: pillow Package: pillow-python2 Package: py3.10-pillow Package: py3.11-pillow Package: py3.12-pillow Package: py3.13-pillow Ecosystem: Debian Ecosystem: PyPI Ecosystem: Ubuntu Ecosystem: Wolfi

Description

Pillow is a Python imaging library. From 2.6.0 until 13.0.0, Pillow is vulnerable to argument injection when invoking Ghostscript for EPS input. EpsImagePlugin.Ghostscript passes a caller-controlled input filename after -f without converting it to a safe absolute path, so a name beginning with a hyphen can be interpreted as a Ghostscript option. An attacker who controls the filename can inject Ghostscript arguments. Arbitrary command execution specifically requires a leading @ argument-file filename and control of the referenced text file containing additional Ghostscript arguments; the reported chain reproduces with the default -dSAFER invocation. This issue is fixed in version 13.0.0.

Affected products

VendorProductAffectedFixed
python-pillow Pillow >= 2.6.0, < 13.0.0 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 pillow No fix yet —
Debian 13 pillow No fix yet —
Debian 12 pillow No fix yet —

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 26.10 pillow 12.3.0-1ubuntu2 USN-9064-1
Ubuntu 26.04 LTS pillow 12.1.1-2ubuntu1.5 USN-9064-1
Ubuntu 24.04 LTS pillow 10.2.0-1ubuntu1.5 USN-9064-1
Ubuntu 22.04 LTS pillow 9.0.1-1ubuntu0.7 USN-9064-1
Show 4 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 20.04 LTS pillow 7.0.0-4ubuntu0.9+esm2 USN-9064-1
Ubuntu Pro 20.04 LTS pillow-python2 No fix yet —
Ubuntu Pro 18.04 LTS pillow 5.1.0-1ubuntu0.8+esm3 USN-9064-1
Ubuntu Pro 16.04 LTS pillow 3.1.2-0ubuntu1.6+esm4 USN-9064-1
Ubuntu Pro 14.04 LTS pillow 2.3.0-1ubuntu3.4+esm6 USN-9064-1

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 8 python-pillow +4 5.1.1-36.el8_10 RHSA-2026:93077
Show 6 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
RHEL 8.8 TUS python-pillow +1 5.1.1-20.el8_8.2 RHSA-2026:98109
RHEL 8.8 E4S python-pillow +1 5.1.1-20.el8_8.2 RHSA-2026:98109
RHEL 8.6 EUS Long Life python-pillow +1 5.1.1-20.el8_6.2 RHSA-2026:98111
RHEL 8.6 AUS python-pillow +1 5.1.1-20.el8_6.2 RHSA-2026:98111
RHEL 8.4 EUS Long Life python-pillow +1 5.1.1-15.el8_4.3 RHSA-2026:98120
RHEL 8.4 AUS python-pillow +1 5.1.1-15.el8_4.3 RHSA-2026:98120

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 8 python3-pillow +3 5.1.1-36.el8_10 ALSA-2026:93077

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 8 python-pillow 5.1.1-36.el8_10 RLSA-2026:93077

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 SP7 python-Pillow 7.2.0-150300.3.33.1 SUSE-SU-2026:5038-1
SLES 15 SP6 python-Pillow 9.5.0-150400.5.28.1 SUSE-SU-2026:5194-1
SLES 15 SP5 python-Pillow 9.5.0-150400.5.28.1 SUSE-SU-2026:5194-1
SLES 15 SP4 python-Pillow 9.5.0-150400.5.28.1 SUSE-SU-2026:5194-1
SLES 3 python-Pillow 9.5.0-150400.5.28.1 SUSE-SU-2026:5194-1
Show 7 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES for SAP 16.0 python-Pillow 11.3.0-160000.9.1 SUSE-SU-2026:24656-1
SLES for SAP 15 SP6 python-Pillow 9.5.0-150400.5.28.1 SUSE-SU-2026:5194-1
SLES for SAP 15 SP5 python-Pillow 9.5.0-150400.5.28.1 SUSE-SU-2026:5194-1
SLES for SAP 15 SP4 python-Pillow 9.5.0-150400.5.28.1 SUSE-SU-2026:5194-1
SLES 16.0 python-Pillow 11.3.0-160000.9.1 SUSE-SU-2026:24656-1
SLE HPC 15 SP5 python-Pillow 9.5.0-150400.5.28.1 SUSE-SU-2026:5194-1
SLE HPC 15 SP4 python-Pillow 9.5.0-150400.5.28.1 SUSE-SU-2026:5194-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed python-Pillow 13.0.0-1.1 openSUSE-SU-2026:12230-1
openSUSE Leap 16.0 python-Pillow 11.3.0-160000.9.1 openSUSE-SU-2026:22246-1

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 python3-pillow +2 9.4.0-2.amzn2023.0.12 ALAS2023-2026-3411

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 8 python3-pillow +3 5.1.1-36.el8_10 ELSA-2026-93077

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling open-webui 0.12.3-r6 —
Wolfi rolling py3.10-pillow No fix yet —
Wolfi rolling py3.11-pillow +2 13.0.0-r0 —

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 4 repositories

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI pillow >= 2.6.0, < 13.0.0 13.0.0 GHSA-w889-685w-c8fh

Advisories 15

References