CVE-2026-112900 | python-pillow Pillow up to 12.x EPS Ghostscript Integration EpsImagePlugin.py EpsImagePlugin.Ghostscript filename argument injection

October 19, 2026 Yanac

A vulnerability was found in python-pillow Pillow up to 12.x and classified as problematic. This impacts the function EpsImagePlugin.Ghostscript of the file EpsImagePlugin.py of the component EPS Ghostscript Integration. Such manipulation of the argument filename leads to argument injection.

This vulnerability is uniquely identified as CVE-2026-112900. The attack can be launched remotely. No exploit exists.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More