File Integrity Vulnerability in OpenPrinting CUPS for Linux Systems

CVE-2026-55480

What is CVE-2026-55480?

OpenPrinting CUPS, an open-source printing system for Linux and Unix-like environments, has a vulnerability in its copy_model function. This issue allows an lp-group writable directory to be exploited due to predictable path formation for temporary files. If an attacker can write to this directory, they could potentially create a symlink before a privileged operation is executed by an admin, leading to the unauthorized modification of files or interruption of service. This vulnerability underscores the importance of proper privilege management and secure configuration in printing systems.

References