Two critical security vulnerabilities were discovered in the popular GIMP image editing software. These vulnerabilities allow remote attackers to execute arbitrary code on affected systems. The flaws, identified as CVE-2025-2760 and CVE-2025-2761, were publicly disclosed on April 7th, 2025, and affect GIMP installations prior to version 3.0.0. Both vulnerabilities require user interaction to trigger successful exploitation. The vulnerabilities were discovered by security researcher Michael Randrianantenaina and reported through the Zero Day Initiative (ZDI). Each vulnerability carries a CVSS v3.0 base score of 7.8, indicating significant potential impacts on system confidentiality, integrity, and availability. Mitigation steps include upgrading to GIMP 3.0.0 or later versions and implementing security awareness training.