CVE-2012-4245: The scriptfu network server in GIMP 2.6 does not require authentication, which allows remote attackers to e...

Security readout for executives and security teams

CVE-2012-4245 is an unauthenticated remote command execution issue in GIMP 2.6's Script-Fu network server. If that server is enabled and reachable, an attacker may run commands through the vulnerable interface. This is mainly a concern for legacy or unusual GIMP deployments, not ordinary image files. Exposure is likely limited to systems running GIMP 2.6 with the Script-Fu network server enabled and reachable over a network. Standard desktop installations may not be exposed unless that service is started or packaged into an appliance or workflow. Prioritize remediation for any reachable server-side or shared workstation deployment. If GIMP 2.6 is only present on isolated desktops with the network server disabled, urgency is lower but legacy software replacement remains appropriate. Mitigation focus: Disable the Script-Fu network server unless explicitly required.; Block network access to any exposed Script-Fu service.; Remove unsupported GIMP 2.6 installations where possible..

Prepared

Jun 28, 2026, 00:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.