CVE-2026-112900

A flaw was found in Pillow. This vulnerability may allow an attacker to achieve arbitrary code execution when processing Encapsulated PostScript (EPS) images. Because Pillow invokes the external Ghostscript utility without properly sanitizing user-controlled input filenames, names beginning with specific command prefixes are misinterpreted as options rather than file paths. An attacker who controls the filename and can supply an additional file containing command arguments can exploit this argument injection to execute arbitrary commands on the system.

This vulnerability is rated Critical because an attacker capable of supplying an unvalidated filename to image handling services can achieve arbitrary remote code execution via argument injection into Ghostscript. In Red Hat environments, exploitation requires the host application to process Encapsulated PostScript files, have the optional Ghostscript package installed, and allow an attacker to place an auxiliary argument file on the target system. Workloads that do not accept untrusted filenames or that run in environments without the external Ghostscript binary are not susceptible to this attack vector.