CVE-2026-59091

High

Description

A flaw was found in GIMP's file format plugins, including those for PSD and PAA files. A remote attacker could exploit these vulnerabilities by tricking a user into opening a specially crafted image file. This could lead to unexpected application behavior or other potential security impacts without requiring further user interaction.

SeverityHigh
CVSS7.3
Exploit probability—
ProductGimp
PublishedAug 10, 2026
First seenAug 10, 2026

How to fix

Affected products

ProductAffected versionsFixed in
gimp gimp3.2.6—
redhat enterprise_linux7.0, 8.0, 9.0—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.