Authentication Bypass in OpenPrinting CUPS Affects Multiple Unix-like Systems
CVE-2025-58060
What is CVE-2025-58060?
OpenPrinting CUPS, an open-source printing system utilized across various Linux and Unix-like operating systems, is subject to a critical vulnerability that allows an authentication bypass. Specifically, in versions 2.4.12 and earlier, if the AuthType is set to anything other than Basic, the system fails to validate passwords when encountering Authorization: Basic ... headers. This oversight remains undetected during authentication attempts, enabling unauthorized access for malicious actors. Configurations permitting non-Basic authentication types are particularly susceptible. The issue has been resolved in version 2.4.13.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
cups < 2.4.13
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved
