CVE-2026-6645— PaperCut Print Deploy 权限许可和访问控制问题漏洞

Insecure Search Path Vulnerability in PaperCut Print Deploy Client for Windows

An insecure process execution vulnerability exists in the pc-printer-updater.exe component of the PaperCut Print Deploy Client for Windows. The application, which typically operates with high-level system privileges, attempts to perform an internal validation check by invoking a secondary system utility using an unqualified file reference. Because the application does not specify an absolute path to this utility, it relies on the operating system's default search order to locate the executable. Under specific conditions, a local attacker with the ability to modify directories within the system's search path could plant a malicious binary that mimics the expected utility. This could result in the malicious code being executed with SYSTEM privileges, leading to a full compromise of the affected host.

N/A

对搜索路径元素未加控制

PaperCut Print Deploy 权限许可和访问控制问题漏洞

PaperCut Print Deploy是PaperCut公司的一款打印机部署管理软件。 PaperCut Print Deploy 1.10.4178之前版本存在权限许可和访问控制问题漏洞，该漏洞源于进程执行不安全，可能导致具有本地访问权限的攻击者提升至SYSTEM权限，完全破解受影响的主机。

N/A

N/A