Critical Code Execution Vulnerability in Python Pillow Library (CVE‑2026‑112900)
What It Is — Pillow, the de‑facto image‑processing library for Python, contains a flaw that lets an attacker trigger operating‑system commands when the library opens a crafted EPS file. The vulnerability stems from passing the supplied filename directly to Ghostscript without validation.
Exploitability — The issue is exploitable on any system that uses Pillow to process untrusted EPS images. Public proof‑of‑concept code has been released, and the CVSS vector suggests a Critical rating.
Affected Products — Pillow ≥ 9.0 (all versions that rely on Ghostscript for EPS handling). The flaw is independent of the underlying OS but requires Ghostscript to be installed.
Why It Matters for Trust & Control Assurance
- Third‑party component risk – The flaw highlights the need for continuous monitoring of open‑source dependencies and evidence that they are patched, a core control objective across many frameworks (e.g., NIST CSF 2.0).
- Secure software development – Organizations must demonstrate that they validate inputs from external libraries, providing audit‑ready artifacts of code‑review and dependency‑scanning.
- Defensible incident response – Knowing which libraries are in use and their patch status enables a rapid, documented response when a vulnerability is disclosed.
Recommended Actions
- Inventory all applications that include Pillow and verify the version in use.
- Upgrade to Pillow 9.5.0 or later, which removes the unsafe Ghostscript call.
- Integrate automated SBOM generation and continuous dependency scanning into your CI/CD pipeline to capture evidence of library versions and remediation status.
- Document the remediation steps in your control evidence repository to support audit readiness.