CVE-2026-123747: Pappl-retrofit: directory traversal in the add-ppdfiles and delete-ppdfiles actions
OpenPrinting · pappl-retrofit
No fix listed · Affected: OpenPrinting pappl-retrofit · Exploitation: not established
ExploitationNot established
Not in CISA KEV as of catalogue 2026.11.10 (10 Nov)
- In CISA KEV: not seen
- Exploited (reported): not seen
- Scanning observed: not seen
- Proof of concept public: not seen
- Not establishedNothing in the sources we check
No EPSS score yet. The score appears once FIRST publishes it.
DescriptionNVD
A flaw was found in pappl-retrofit. The application fails to properly sanitize user-supplied filenames when handling the upload and deletion of PostScript Printer Description (PPD) files. A remote, unauthenticated attacker can exploit this directory traversal flaw by submitting filenames containing path traversal sequences. This allows the attacker to upload or delete arbitrary files on the system, which can result in data corruption, denial of service, or arbitrary command execution.
Fix status by distribution
From each distribution’s security tracker. Distributions we did not check are not listed.
- Red Hat Enterprise Linux 10Not affectedchecked 12 Nov 03:30 UTC
What changed
Red Hat status tracked since 12 Nov 2026.
- Red Hat’s tracker lists RHEL 10 as not affected Red Hat
Coverage1 article · 1 outlet
First in our coverage: SecurityOnline, 12 Nov.
- OpenPrinting fixes pappl-retrofit flaw enabling root file accessSecurityOnline · first in our coverage
New articles also arrive in the RSS feed.