CVE-2022-23935: Exiftool Project Exiftool

High severity, CVSS 7.8. EPSS: 7.6% chance of exploitation in the next 30 days.

lib/Image/ExifTool.pm in ExifTool before 12.38 mishandles a $file =~ /\|$/ check, leading to command injection.

Affected products

• Exiftool Project Exiftool: before 12.38 (fixed in 12.38)

Published 2022-01-25. Last modified 2026-06-17.