gimp

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime path scripts/gimp_client.py:send_scheme(...)->python-fu-eval sends attacker-supplied Script-Fu/Python text over the local Script-Fu server socket and GIMP executes it in the live session (no authentication, “hands whatever arrives to python-fu-eval”).