What is CVE-2026-112177?

CVE-2026-112177 is a high-severity vulnerability in Red Hat Enterprise Linux 8, classified under CWE-648. CVSS score: 7.3/10. Published 2026-10-20.

How severe is CVE-2026-112177?

High severity. CVSS v3 base score is 7.3 out of 10.

Vulnerability in Red Hat Enterprise Linux 8

CVE-2026-112177

A flaw was found in Ghostscript as shipped with Red Hat Enterprise Linux 8. The correction for CVE-2019-14869 was omitted during the rebase from version 9.25 to 9.27, leaving privileged .forceput operations in the .charkeys procedure insufficiently protected. Processing a specially crafted PostScript file may allow an attacker to bypass -dSAFER restrictions and access files outside the permitted paths or execute commands with the permissions of the Ghostscript process.

Published 2026-10-20 · last modified 2026-10-20.

CVSS v3 metric

CVSS v3 base score 7.3 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L.

EPSS exploit prediction

No EPSS score from FIRST.org yet. New CVEs usually get one within a few days; no score means no signal yet, not low risk. How EPSS works.

Affected products

Red Hat Enterprise Linux 8

Weakness classification (CWE)

CWE-648

References

access.redhat.com/security/cve/CVE-2026-112177 (vdb-entry)
bugzilla.redhat.com/show_bug.cgi (issue-tracking)
github.com/ArtifexSoftware/ghostpdl/commit/485904772c5f0aa1140032746e5a0abfc40f…

Frequently asked questions

What is CVE-2026-112177?: CVE-2026-112177 is a high-severity vulnerability in Red Hat Enterprise Linux 8, classified under CWE-648. CVSS score: 7.3/10. Published 2026-10-20.
How severe is CVE-2026-112177?: High severity. CVSS v3 base score is 7.3 out of 10.