Skip to content
brandefense.io
Request A Demo
Trending Vulnerabilities

Why it is trending

CVE-2026-112900

Pillow is a Python imaging library. From 2.6.0 until 13.0.0, Pillow is vulnerable to argument injection when invoking Ghostscript for EPS input. EpsImagePlugin.Ghostscript passes a caller-controlled input filename after -f without convertin

Low
  • CVSS 9.2
  • Public PoC
Buzz
30discussion, 0-100
Danger
39exploitability, 0-100
Mentions
5since 23 Oct 2026
EPSS
0.4%exploit probability
Mentions Per Day · UTCpeak 5
29 days agoToday
Where The Talk Is · by platform5 total
  • X3 mentions · 3 voices
  • GitHub1 mentions · 1 voices · 1 PoC
  • Dark web1 mentions · count only

    Out of 5 mentions in total. We show how many, never what was said or where.

Newest Public Posts · plain text, newest first

X

  • SITUACIÓN: Pillow (librería de imágenes de Python, ~436 M de descargas/mes) corrige CVE-2026-112900 (CVSS 9.2): un nombre de archivo EPS controlado por el atacante permite ejecutar comandos vía Ghostscript. Parche en 13.0.0; sin explotación conocida. The Hacker News

    @MLS_HQ12 h agolikes 0views 8replies 0Open

  • Pillow, Python's most used image library (~436M downloads a month), fixed three CVSS 9.2 flaws in 13.0.0. Worst is CVE-2026-112900: an attacker-chosen EPS filename can inject Ghostscript args and run commands. Versions 2.6.0 to 12.3.0 hit. No exploitation seen yet #Python https://t.co/KgRG2ey2Q3

    @phantmradar13 h agolikes 0views 18replies 0Open

  • 🛑 A filename is enough to trigger OS command execution in Python's widely used Pillow image library. CVE-2026-112900 abuses how Pillow passes EPS filenames to Ghostscript. What you need to know ↓ https://t.co/WgsQv9TroW

    @TheHackersNews14 h agolikes 6views 3,487replies 0Open

GitHub

  • techupdate24/python-pillow-rce-cve-2026-112900: A complete guide and workflow for integrating Agile sprints with DevOps CI/CD pipelines.

    techupdate24/python-pillow-rce-cve-2026-11290011 h agostars 0PoCOpen
Public PoC Repositories · third-party code1 links

Links are collected from public posts and are not reviewed by Brandefense. Exploit code can be unsafe or malicious: only study it in an isolated lab, and never run it against systems you do not own.

Get a morning brief and an alert the moment a critical vulnerability like this one starts trending.

Subscribe