OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, in a network-exposed cupsd with a shared target queue, an unauthorized client can send a Print-Job to that shared PostScript queue without authentication. The server accepts a page-border value supplied as textWithoutLanguage, preserves an embedded newline through option escaping and reparse, and then reparses the resulting second-line PPD: text as a trusted scheduler control record. A follow-up raw print job can therefore make the server execute an attacker-chosen existing binary such as /usr/bin/vim as lp. At time of publication, there are no publicly available patches.
CVSS Details
- CVSS 4.0 Base Score: 6.1 (MEDIUM)
- CVSS 4.0 Vector: (CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X)
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade cups-libsUpgrade cups-ipptoolUpgrade cups-filesystemUpgrade cups-clientUpgrade cups-printerappUpgrade cups-lpdUpgrade cupsUpgrade cups-devel | Jul 9, 2026 | Jul 8, 2026 |
| Alpine Linux | — | Upgrade cups | Apr 29, 2026 | Apr 3, 2026 |
| Amazon Linux Ami 2 | — | Upgrade cups-ipptoolUpgrade cups-filesystemUpgrade cups-libsUpgrade cups-clientUpgrade cupsUpgrade cups-debuginfoUpgrade cups-develUpgrade cups-lpd | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade cups-filesystemUpgrade cups-ipptool-debuginfoUpgrade cups-libsUpgrade cups-ipptoolUpgrade cups-lpd-debuginfoUpgrade cupsUpgrade cups-clientUpgrade cups-debuginfoUpgrade cups-debugsourceUpgrade cups-client-debuginfoUpgrade cups-develUpgrade cups-printerappUpgrade cups-lpdUpgrade cups-printerapp-debuginfoUpgrade cups-libs-debuginfo | May 4, 2026 | Apr 3, 2026 |
| Redhat_linux | — | Upgrade cups-debugsourceUpgrade cups-libs-debuginfoUpgrade cupsUpgrade cups-lpd-debuginfoUpgrade cups-client-debuginfoUpgrade cups-lpdUpgrade cups-develUpgrade cups-filesystemNo solution existsUpgrade cups-debuginfoUpgrade cups-ipptoolUpgrade cups-libsUpgrade cups-printerappUpgrade cups-clientUpgrade cups-ipptool-debuginfoUpgrade cups-printerapp-debuginfo | Jul 10, 2026 | Apr 3, 2026 |
| Rocky_linux | — | Upgrade cups-ipptoolUpgrade cups-libsUpgrade cups-clientUpgrade cups-printerapp-debuginfoUpgrade cups-debugsourceUpgrade cups-debuginfoUpgrade cups-develUpgrade cups-ipptool-debuginfoUpgrade cupsUpgrade cups-client-debuginfoUpgrade cups-printerappUpgrade cups-lpd-debuginfoUpgrade cups-libs-debuginfoUpgrade cups-lpd | Jul 10, 2026 | Jul 9, 2026 |
| Ubuntu | — | Upgrade cups-client (Ubuntu Pro)Upgrade cups-core-drivers (Ubuntu Pro)Upgrade cupsUpgrade cups-daemonUpgrade cups-bsd (Ubuntu Pro)Upgrade libcups2 (Ubuntu Pro)Upgrade cups-common (Ubuntu Pro)Upgrade cups-daemon (Ubuntu Pro)Upgrade cups (Ubuntu Pro) | Jun 9, 2026 | Jun 8, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Apr 3, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub