CUPS Vulnerability Allows Code Execution with Administrator Rights

CERT-Bund published a security advisory identifying a vulnerability in CUPS that allows local authenticated attackers to execute arbitrary code with administrator privileges. The advisory affects Open Source CUPS installations across Linux, UNIX, and Windows environments. The vulnerability carries a CVSS Base Score of 5.2 (medium severity) with no remote attack vector. Organizations running CUPS print services face elevated risk of local privilege escalation if untrusted users have system access.

Affected organizations should prioritize patching CUPS installations, implement least-privilege access controls on print spooler services, and monitor for indicators of compromise. Given the administrative-level code execution capability, successful exploitation could allow attackers to gain full system control, making this a significant risk for servers and workstations running the affected software.