CVE-2026-55798
Fixed in a distro release EPSS <1%CVSS 4.5
Pillow is a Python imaging library. Prior to 12.3.0, WindowsViewer.get_command() constructed a cmd.exe shell command by directly embedding a file path into an f-string without escaping and passed the result to subprocess.Popen(..., shell=True), allowing shell metacharacters in the file path to inject arbitrary cmd.exe commands. This issue is fixed in version 12.3.0.
Products: python-pillow Pillow
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | pillow | 12.3.0 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | label-studio | 1.23.0-r11 |
| Chainguard | lmcache-cuda-12.8 | 0.5.3-r0 |
| Chainguard | mlflow | 3.14.0-r2 |
| Chainguard | mlflow | 3.16.0-r0 |
| Chainguard | open-webui | no fix |
| Chainguard | open-webui | 0.10.2-r1 |
| Chainguard | open-webui | 0.11.0-r0 |
| Chainguard | openstack-horizon-2025.2 | 25.5.2_git20260617-r4 |
| Chainguard | openstack-horizon-2025.2-fips | 25.5.2_git20260617-r5 |
| Chainguard | openstack-horizon-2026.1 | 25.7.3_git20260630-r2 |
| Chainguard | openstack-horizon-2026.1-fips | 25.7.3_git20260630-r2 |
| Chainguard | superset-6.0 | 6.0.0-r13 |
| Chainguard | superset-6.1 | 6.1.0-r6 |
| Chainguard | superset-fips-6.1 | 6.1.0-r5 |
| Chainguard | tensorflow-gpu-jupyter | 2.21.0-r7 |
| Chainguard | text-generation-inference | 3.3.7-r20 |
| Chainguard | tritonserver-backend-vllm-cuda-13.0 | 25.11-r11 |
| Wolfi | mlflow | 3.16.0-r0 |
| Wolfi | mlflow | 3.14.0-r2 |
| Wolfi | open-webui | 0.10.2-r1 |
| Wolfi | open-webui | no fix |
| Wolfi | open-webui | 0.11.0-r0 |
| Wolfi | superset-6.0 | 6.0.0-r13 |
| Wolfi | superset-6.1 | 6.1.0-r6 |