Copyright © 2012 Red Hat, Inc. All rights reserved. Moderate 2026-07-06T18:44:38 python-pillow: Pillow: Arbitrary command injection via shell metacharacters in file paths 4.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L CWE-78

Pillow is a Python imaging library. Prior to 12.3.0, WindowsViewer.get_command() constructed a cmd.exe shell command by directly embedding a file path into an f-string without escaping and passed the result to subprocess.Popen(..., shell=True), allowing shell metacharacters in the file path to inject arbitrary cmd.exe commands. This issue is fixed in version 12.3.0.

A flaw was found in Pillow, a Python imaging library. The `WindowsViewer.get_command()` function constructed a command-line interface (CLI) shell command by directly embedding a file path without proper escaping. This allowed shell metacharacters within the file path to inject arbitrary commands into `cmd.exe`. An attacker could exploit this to execute unauthorized commands on the system.

A flaw was found in Pillow, a Python imaging library. The WindowsViewer.get_command() method constructs a cmd.exe shell command by directly embedding a file path into an f-string without applying shlex.quote() or equivalent escaping. This string is then passed to subprocess.Popen with shell=True, allowing shell metacharacters in the file path to inject and execute arbitrary cmd.exe commands. The vulnerability is specific to the Windows platform; the Linux (UnixViewer) and macOS (MacViewer) equivalents already apply proper shell quoting. This vulnerability is specific to the WindowsViewer class in Pillow, which is only invoked on Windows systems. Red Hat products ship and run on Linux, where the UnixViewer class is used instead, which properly applies shlex.quote() to file paths. The vulnerable Windows code path is not reachable on Red Hat's supported platforms. Users can upgrade to Pillow 12.3.0 or later, which adds proper escaping to the Windows code path. Exploit Intelligence Not affected exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 Lightspeed Core Not affected lightspeed-core/lightspeed-stack-rhel9 OpenShift Lightspeed Not affected openshift-lightspeed/lightspeed-ocp-rag-rhel9 OpenShift Lightspeed Not affected openshift-lightspeed/lightspeed-service-api-rhel9 OpenShift Lightspeed Not affected openshift-lightspeed-tech-preview/lightspeed-rag-tool-rhel9 Red Hat AI Inference Server Not affected rhaii/model-opt-cuda-rhel9 Red Hat AI Inference Server Not affected rhaiis/model-opt-cuda-rhel9 Red Hat AI Inference Server Not affected rhaiis/vllm-cpu-rhel9 Red Hat AI Inference Server Not affected rhaiis/vllm-cuda-rhel9 Red Hat AI Inference Server Not affected rhaiis/vllm-neuron-rhel9 Red Hat AI Inference Server Not affected rhaiis/vllm-rocm-rhel9 Red Hat AI Inference Server Not affected rhaiis/vllm-spyre-rhel9 Red Hat AI Inference Server Not affected rhaiis/vllm-tpu-rhel9 Red Hat AI Inference Server Not affected rhaii/vllm-cpu-rhel9 Red Hat AI Inference Server Not affected rhaii/vllm-cuda-rhel9 Red Hat AI Inference Server Not affected rhaii/vllm-gaudi-rhel9 Red Hat AI Inference Server Not affected rhaii/vllm-neuron-rhel9 Red Hat AI Inference Server Not affected rhaii/vllm-rocm-rhel9 Red Hat AI Inference Server Not affected rhaii/vllm-spyre-rhel9 Red Hat AI Inference Server Not affected rhaii/vllm-tpu-rhel9 Red Hat Ansible Automation Platform 2 Not affected ansible-automation-platform-25/lightspeed-chatbot-rhel8 Red Hat Ansible Automation Platform 2 Not affected ansible-automation-platform-26/hub-rhel9 Red Hat Ansible Automation Platform 2 Not affected ansible-automation-platform-26/lightspeed-chatbot-rhel9 Red Hat Ansible Automation Platform 2 Not affected ansible-automation-platform-27/hub-rhel9 Red Hat Ansible Automation Platform 2 Not affected ansible-automation-platform-27/lightspeed-chatbot-rhel9 Red Hat Ansible Automation Platform 2 Not affected ansible-automation-platform/automation-dashboard-rhel9 Red Hat Ansible Automation Platform 2 Not affected python-pillow Red Hat Enterprise Linux 7 Not affected python-pillow Red Hat Enterprise Linux 8 Not affected python-pillow Red Hat Enterprise Linux AI (RHEL AI) 3 Not affected rhelai3/bootc-aws-cuda-rhel9 Red Hat Enterprise Linux AI (RHEL AI) 3 Not affected rhelai3/bootc-azure-cuda-rhel9 Red Hat Enterprise Linux AI (RHEL AI) 3 Not affected rhelai3/bootc-azure-rocm-rhel9 Red Hat Enterprise Linux AI (RHEL AI) 3 Not affected rhelai3/bootc-cuda-rhel9 Red Hat Enterprise Linux AI (RHEL AI) 3 Not affected rhelai3/bootc-gaudi-rhel9 Red Hat Enterprise Linux AI (RHEL AI) 3 Not affected rhelai3/bootc-gcp-cuda-rhel9 Red Hat Enterprise Linux AI (RHEL AI) 3 Not affected rhelai3/bootc-rocm-rhel9 Red Hat Enterprise Linux AI (RHEL AI) 3 Not affected rhelai3/disk-image-cuda-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-automl-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-autorag-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-caikit-nlp-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-caikit-tgis-serving-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-kserve-agent-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-kserve-autogluon-server-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-kserve-controller-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-kserve-router-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-kserve-storage-initializer-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-llama-stack-core-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-llm-d-inference-scheduler-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-llm-d-kv-cache-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-mlflow-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-openvino-model-server-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-th06-cpu-torch210-py312-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-th06-cpu-torch291-py312-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-th06-cuda130-torch210-py312-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-th06-cuda130-torch291-py312-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-th06-rocm64-torch291-py312-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-training-cuda128-torch29-py312-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-training-rocm64-torch29-py312-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-trustyai-nemo-guardrails-server-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-vllm-gaudi-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9 Red Hat Quay 3 Not affected quay/quay-rhel8 Red Hat Quay 3 Not affected quay/quay-rhel9 Red Hat Satellite 6 Not affected python-pillow Red Hat Satellite 6 Not affected satellite:el8/python-pillow https://www.cve.org/CVERecord?id=CVE-2026-55798 https://nvd.nist.gov/vuln/detail/CVE-2026-55798 https://github.com/python-pillow/Pillow/blob/main/docs/releasenotes/12.3.0.rst https://github.com/python-pillow/Pillow/commit/8404ea5fe5df40fc34aa1e51403dd6fce0778b8a https://github.com/python-pillow/Pillow/commit/88194166691b7b603529b8b036ab3ab9cedd2de4 https://github.com/python-pillow/Pillow/commit/b0e06caa64c1405aa3da0bb1d2bd9a77ca22de7f https://github.com/python-pillow/Pillow/security/advisories/GHSA-4x4j-2g7c-83w6