CVE-2026-34978

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, the RSS notifier allows .. path traversal in notify-recipient-uri (e.g., rss:///../job.cache), letting a remote IPP client write RSS XML bytes outside CacheDir/rss (anywhere that is lp-writable). In particular, because CacheDir is group-writable by default (typically root:lp and mode 0770), the notifier (running as lp) can replace root-managed state files via temp-file + rename(). This PoC clobbers CacheDir/job.cache with RSS XML, and after restarting cupsd the scheduler fails to parse the job cache and previously queued jobs disappear. At time of publication, there are no publicly available patches.

• CWE-22

• https://github.com/OpenPrinting/cups/security/advisories/GHSA-f53q-7mxp-9gcrExploit, Vendor Advisory
• https://github.com/OpenPrinting/cups/security/advisories/GHSA-f53q-7mxp-9gcrExploit, Vendor Advisory

Published

Apr 3, 2026

Last Modified

Jul 20, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-34972OpenFGA is a high-performance and flexible authorization/per…8.8
• CVE-2026-34973phpMyFAQ is an open source FAQ web application. Prior to ver…5.3
• CVE-2026-34974phpMyFAQ is an open source FAQ web application. Prior to ver…5.4
• CVE-2026-34975Plunk is an open-source email platform built on top of AWS S…4.3
• CVE-2026-34976Dgraph is an open source distributed GraphQL database. Prior…10
• CVE-2026-34977Aperi'Solve is an open-source steganalysis web platform. In …9.8
• CVE-2026-34979OpenPrinting CUPS is an open source printing system for Linu…5.3
• CVE-2026-3498The BlockArt Blocks plugin for WordPress is vulnerable to St…6.4
• CVE-2026-34980OpenPrinting CUPS is an open source printing system for Linu…7.5
• CVE-2026-34981The whisperX API is a tool for enhancing and analyzing audio…5.8
• CVE-2026-34982Vim is an open source, command line text editor. Prior to ve…8.2
• CVE-2026-34983Wasmtime is a runtime for WebAssembly. In 43.0.0, cloning a …5