Project: 
Ffmpeg Image Toolkit
Project machine name: 
ffmpeg_image_toolkit
Date: 
2026-October-21
Security risk: 
Highly critical 20 ∕ 25 AC:Basic/A:None/CI:All/II:All/E:Theoretical/TD:All
Vulnerability: 
Remote Code Execution
Affected versions: 
<1.0.3
CVE IDs: 
CVE-2026-114523
Description: 

This module enables you to use ffmpeg for image conversion

The module doesn't sufficiently sanitize file names passed to the ffmpeg cli tool.

This vulnerability is mitigated by the fact that an attacker must be able to upload images on the site.

Solution: 

Install the latest version:

Reported By: 
Fixed By: 
Coordinated By: