CRITICALVulnerability
Global

Critical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted Image

·Source: The Hacker News

Updated:

Executive Summary

Pillow, the most widely used image library for Python, can be made to run operating system commands on a server by specifying the name of a file it is told to open. The flaw, CVE-2026-112900, is in the way Pillow handles EPS images, which it opens by passing the file's name to Ghostscript, a separate program it runs to turn the image into pixels, without checking the name first.

Analysis

Pillow, the most widely used image library for Python, can be made to run operating system commands on a server by specifying the name of a file it is told to open. The flaw, CVE-2026-112900, is in the way Pillow handles EPS images, which it opens by passing the file's name to Ghostscript, a separate program it runs to turn the image into pixels, without checking the name first.

Indicators of Compromise (1)

CVE (1)
CVE-2026-112900
NVDMITRE CVE
Source Attribution

Originally published by The Hacker News on Oct 23, 2026.

Related Threats

MEDIUMVulnerabilityNEW

Quest Diagnostics warns of potential data theft after attack on lab service system

Nationwide lab test company Quest Diagnostics said one of its key systems may have experienced a breach of patient data.

The Record
MEDIUMVulnerabilityNEW

HPE patches eight max severity RCE and auth bypass AOS flaws

Hewlett Packard Enterprise (HPE) released security updates to patch 72 vulnerabilities in the Aruba Operating System (ArubaOS), including eight maximum-severity authentication bypass and code execution issues. [...]

BleepingComputer
MEDIUMVulnerabilityNEW

Quant salaries on the rise amid AI revolution

Remuneration for quantitative finance professionals has continued to rise despite the increased use of AI, according to recently published research.

Finextra