Pillow CVE-2026-55798

Exploitation is strictly limited to Windows systems, as WindowsViewer targets cmd.exe and is not invoked on Linux or macOS. The attacker must control or meaningfully influence the file path - specifically the filename - passed to WindowsViewer.get_command(); this is the concrete triggering condition stated in the CVE description (direct embedding of a file path without escaping). A user must actively trigger the image viewing operation (UI:R per CVSS). High attack complexity (AC:H) reflects the prerequisite that an attacker-controlled filename must reach this specific code path - applications that source filenames exclusively from trusted internal sources are not exploitable. Pillow deployments that do not use the WindowsViewer component at all (the majority of server-side and cross-platform use cases) have no exposure.

The CVSS 3.1 score of 4.5 with vector AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L reflects a realistic but bounded threat. The local attack vector (AV:L) constrains exploitation to scenarios where the attacker can place or influence a file path on the target system - ruling out direct remote exploitation over the network. High attack complexity (AC:H) further limits the attack surface to cases where an attacker-controlled filename reaches the WindowsViewer code path. User interaction (UI:R) is required, meaning a user must actively trigger the image viewer. The impact triad of C:L/I:L/A:L indicates that commands execute in the context of the invoking user, not as elevated privilege. No EPSS data was provided, no KEV listing exists, and no public POC has been identified - all consistent with a low-urgency but real vulnerability in a specific Windows code path. This is a genuine issue for Windows-based Python applications that pass user-influenced file paths to Pillow's viewer functionality, but not a broad-scope emergency for server-side or non-Windows deployments.

An attacker uploads or delivers a file with a crafted name such as legitimate.jpg & net user backdoor P@ssw0rd /add to a Windows environment where a Python application uses Pillow's WindowsViewer to open images. When a user or automated process triggers image display via get_command(), the unsanitized filename is embedded into the cmd.exe command string, causing the appended shell command to execute with the permissions of the invoking process. No public POC has been identified at time of analysis, but the attack primitive is straightforward for anyone familiar with Windows shell injection.