---
schema_version: '1.0'
id: security-20260714-e41644
url: https://osv.dev/vulnerability/PYSEC-2026-2257
url_hash: e41644e1dc99db2577e945d77c163591fde67f4ca8da03f7a1b6186a91e01226
canonical_url: https://osv.dev/vulnerability/PYSEC-2026-2257
source: osv:pypa
category: security/library
category_raw: cve/library
region: null
tags:
- cve
- CVE-2026-55798
- PYSEC-2026-2257
- severity:CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
- pillow
- PyPI
lang: en
published_at: '2026-07-06T19:17:08Z'
fetched_at: '2026-07-14T06:42:23Z'
updated_at: '2026-07-14T06:44:25Z'
status: published
content_hash: 1ce4d8c4641d0ecfb5bf2570bef2878a731677045e94b3425b094dd8ac88da5a
license_note: full
summary: Pillow is a Python imaging library. Prior to 12.3.0, WindowsViewer.get_command()
  constructed a cmd.exe shell command by directly embedding a file path into an f-string
  without escaping and passed the result to subprocess.Popen(..., shell=True), allowing
  shell metacharacters in th
summary_source: rss
summary_en: Pillow is a Python imaging library. Prior to 12.3.0, WindowsViewer.get_command()
  constructed a cmd.exe shell command by directly embedding a file path into an f-string
  without escaping and passed the result to subprocess.Popen(..., shell=True), allowing
  shell metacharacters in th
entities:
- name: Pillow
  type: artifact
key_facts: []
related: []
related_auto: []
title: CVE-2026-55798 — pillow
---

# CVE-2026-55798 — pillow

## TL;DR
Pillow is a Python imaging library. Prior to 12.3.0, WindowsViewer.get_command() constructed a cmd.exe shell command by directly embedding a file path into an f-string without escaping and passed the result to subprocess.Popen(..., shell=True), allowing shell metacharacters in th

## Key Points
- cve / CVE-2026-55798 / PYSEC-2026-2257 / severity:CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L / pillow / PyPI

## Details
**Severity:** CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
**Advisory:** PYSEC-2026-2257 (CVE-2026-55798)

**Affected (your watchlist):**
- `PyPI:pillow` 12.1.1 → fixed in 12.3.0 [docker/docker-llmwiki]
- `PyPI:pillow` 12.2.0 → fixed in 12.3.0 [docker/local+docker/mac]

**Details:**
Pillow is a Python imaging library. Prior to 12.3.0, WindowsViewer.get_command() constructed a cmd.exe shell command by directly embedding a file path into an f-string without escaping and passed the result to subprocess.Popen(..., shell=True), allowing shell metacharacters in the file path to inject arbitrary cmd.exe commands. This issue is fixed in version 12.3.0.

**References:**
- https://github.com/python-pillow/Pillow/blob/main/docs/releasenotes/12.3.0.rst
- https://github.com/python-pillow/Pillow/commit/8404ea5fe5df40fc34aa1e51403dd6fce0778b8a
- https://github.com/python-pillow/Pillow/commit/88194166691b7b603529b8b036ab3ab9cedd2de4
- https://github.com/python-pillow/Pillow/commit/b0e06caa64c1405aa3da0bb1d2bd9a77ca22de7f
- https://github.com/python-pillow/Pillow/security/advisories/GHSA-4x4j-2g7c-83w6

_Data: OSV.dev (upstream: pypa) — https://osv.dev/vulnerability/PYSEC-2026-2257_

## Source
元記事: [CVE-2026-55798 — pillow](https://osv.dev/vulnerability/PYSEC-2026-2257) — published 2026-07-06T19:17:08Z