Insecure Process Execution in PaperCut Print Deploy Client for Windows

CVE-2026-6645

What is CVE-2026-6645?

A vulnerability exists in the pc-printer-updater.exe component of the PaperCut Print Deploy Client for Windows that allows local attackers to exploit an insecure process execution flaw. The client, which generally operates with elevated system privileges, performs an internal validation check by calling a secondary utility without specifying an absolute file path. This omission can be exploited by an attacker who has the ability to modify the system's search path. By placing a malicious binary in the expected search order, the attacker can execute their code with SYSTEM privileges, leading to a full compromise of the affected host.

References