pappl-retrofit directory traversal in PPD actions (CVE-2026-123747)
The flaw affects add-ppdfiles and delete-ppdfiles, with a fix planned for a release soon after the advisory.
42
CVE-2026-123747
Directory traversal in pappl-retrofit PPD upload and delete
- CVSS 3.1
- 7.3 high
- EPSS
- —
- Published
- ·
- Modified
AI analysisSummaries by Vani AI
pappl-retrofit does not sanitize user-supplied filenames when adding or deleting PostScript Printer Description (PPD) files. A remote attacker can submit path-traversal sequences to upload or delete arbitrary files on the system. That can corrupt data, cause denial of service, or lead to arbitrary command execution. Affected versions are not listed.
What to do: No fixed version is listed. Apply the maintainer update that addresses CVE-2026-123747.
| Product | Affected |
|---|---|
| pappl-retrofit | — |
Estimated exposure
nicheNo basis for an estimate.
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.
Description · NVD
A flaw was found in pappl-retrofit. The application fails to properly sanitize user-supplied filenames when handling the upload and deletion of PostScript Printer Description (PPD) files. A remote, unauthenticated attacker can exploit this directory traversal flaw by submitting filenames containing path traversal sequences. This allows the attacker to upload or delete arbitrary files on the system, which can result in data corruption, denial of service, or arbitrary command execution.
- Weakness
- CWE-22
- Vector
- CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:N/I:H/A:H