Live › vulnerability › CVE-2026-112177
Go to dashboardA missing fix from a rebase left privileged .forceput operations in Ghostscript's .charkeys procedure under-protected on Red Hat Enterprise Linux 8. A specially crafted PostScript file can bypass -dSAFER, reading files outside permitted paths or running commands as the Ghostscript process.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Systems running Ghostscript as shipped in Red Hat Enterprise Linux 8 that handle untrusted PostScript input, such as print servers, document converters or upload-to-thumbnail services. Hosts that only process trusted files or do not have Ghostscript installed can skip it.
No product ranges from the sources yet.
rpm -q ghostscript on RHEL 8 hostsghostscript package on RHEL 8 to the fixed build from Red Hat's advisory for this CVE (version unknown from the sources)Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A flaw was found in Ghostscript as shipped with Red Hat Enterprise Linux 8. The correction for CVE-2019-14869 was omitted during the rebase from version 9.25 to 9.27, leaving privileged .forceput operations in the .charkeys procedure insufficiently protected. Processing a specially crafted PostScript file may allow an attacker to bypass -dSAFER restrictions and access files outside the permitted paths or execute commands with the permissions of the Ghostscript process.
This page as .md · .json · in your agent: get_signal("CVE-2026-112177")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.