Security Advisory - Published 2026-06-25 - GIMP / GEGL
GIMP CVE-2026-2050: check HDR file handling on design and support desktops
CVE-2026-2050 affects HDR file parsing in the GIMP / GEGL image processing path. The practical risk is desktop or workstation exposure: users opening untrusted image files from tickets, email, downloads, or shared drives before patches are applied.
CVE summary
| CVE | Product | File type | CVSS |
|---|---|---|---|
| CVE-2026-2050 | GIMP / GEGL | HDR | 7.8 |
Owner self-check
gimp --version 2>/dev/null
gegl --version 2>/dev/null
rpm -qa | egrep 'gimp|gegl' 2>/dev/null || dpkg -l | egrep 'gimp|gegl' 2>/dev/null
find ~/Downloads ~/Desktop -type f -mtime -14 2>/dev/null | egrep '\\.hdr$|\\.pic$|\\.rgbe$'What to review
- GIMP and GEGL versions on design, marketing, support, and helpdesk workstations.
- Recent HDR or image files from tickets, email attachments, shared drives, or public uploads.
- Endpoint alerts around image viewers, crashes, suspicious child processes, or newly downloaded files.
Safe fix path
- Apply OS vendor, GIMP, or GEGL package updates as they become available.
- Block opening untrusted HDR files during rollout.
- Preserve endpoint alerts and suspicious files before cleanup.
- Reimage or isolate endpoints if image opening coincides with suspicious process activity.
Repair help
Use Ping7 CVE Repair when workstation logs, suspicious files, or post-open process activity need review after an image-processing alert.