Samba Printing Subsystem Vulnerability in Samba Software

CVE-2026-4480

What is CVE-2026-4480?

A vulnerability exists in the Samba printing subsystem that allows remote attackers to execute arbitrary commands on affected systems. The flaw occurs due to improper handling of the client-controlled job description string, which is passed directly to the configured print command without escaping shell meta characters. By crafting a malicious print job description containing unescaped shell characters, an attacker can manipulate the system to execute arbitrary code remotely, potentially leading to unauthorized access and control over the machine.

References