A vulnerability was determined in exiftool up to 13.49 on macOS.

Code

The project this record applies to. Exploit listings stay in References.

• Repository · github.com

Timeline

Detection, updates, and resolution for this record.

1. Feb 24, 2026 · NIST NVD

   Detected

   A vulnerability was determined in exiftool up to 13.49 on macOS. This issue affects the function SetMacOSTags of the file lib/Image/ExifTool/MacOS.pm of the component PNG File Parser. This manipulation of the argument DateTimeOriginal causes os command injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 13.

2. Jun 17, 2026 · NIST NVD

   Updated

   A vulnerability was determined in exiftool up to 13.49 on macOS. This issue affects the function SetMacOSTags of the file lib/Image/ExifTool/MacOS.pm of the component PNG File Parser. This manipulation of the argument DateTimeOriginal causes os command injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 13.

Affected

• cpe exiftool project/exiftoolversion unspecified

Sources

• NIST NVDVulnerability recordCVE-2026-3102

  A vulnerability was determined in exiftool up to 13.49 on macOS. This issue affects the function SetMacOSTags of the file lib/Image/ExifTool/MacOS.pm of the component PNG File Parser. This manipulation of the argument DateTimeOriginal causes os command injection. The attack is po

  nvd.nist.gov

References

• Product · github.com
• Patch · github.com
• Release Notes · github.com
• Permissions Required · vuldb.com
• Third Party Advisory · vuldb.com
• Exploit · vuldb.com
• Exploit · youtube.com