Authorization Bypass in OpenPrinting CUPS Affects Linux and Unix Users
CVE-2026-27447

4.8MEDIUM

Key Information:

Vendor

Openprinting

Status
Cups
Vendor
CVE Published:
3 April 2026

What is CVE-2026-27447?

OpenPrinting's CUPS, an open-source printing system for Linux and Unix-like operating systems, is affected by an authorization bypass vulnerability. This flaw allows unprivileged users to execute restricted operations by utilizing a username that only differs in casing from that of an authorized user. With CUPS versions 2.4.16 and earlier being impacted, there are currently no public patches available to address this security issue. This vulnerability highlights the need for enhanced security measures in authorization processes to prevent unauthorized access.

Affected Version(s)

cups <= 2.4.16

References

https://github.com/OpenPrinting/cups/security/advisories/...
x_refsource_CONFIRM
https://github.com/OpenPrinting/cups/commit/88516bf6d9e34...
x_refsource_MISC

CVSS V3.1

Score:
4.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
High
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.