CVE-2026-11526 GD versions before 2.86 for Perl allow OS command injection and file overwrite via a 2-arg open() of filename arguments in _make_filehandle

GD versions before 2.86 for Perl allow OS command injection and file overwrite via a 2-arg open of filename arguments in makefilehandle. GD::Image::makefilehandle opens a filename argument with Perl's 2-arg open, so a filename that begins or ends with a pipe "| cmd", "cmd |" or begins with a...

CVE-2026-11526

CVE-2026-11526 affects GD for Perl prior to 2.86. The flaw occurs in GD::Image::_make_filehandle, which uses Perl’s 2-arg open() on a filename argument. If the filename begins/ends with a pipe or starts with a redirect, it can execute a command or overwrite files instead of opening a normal file....