PT-2026-55966 · Pypi · Pillow
CVSS v3.1
4.5
Medium
| Vector | AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L |
Name of the Vulnerable Software and Affected Versions
Pillow versions prior to 12.3.0
Description
The
WindowsViewer.get command() function constructs a cmd.exe shell command by embedding a file path into an f-string without proper escaping. This result is then passed to subprocess.Popen(..., shell=True), which allows the injection of arbitrary cmd.exe commands via shell metacharacters within the file path.Recommendations
Update to version 12.3.0.
Exploit
Fix
OS Command Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Pillow