Back Sploitus

Exploit for Improper Authentication in Openprinting Cups

Sploitus • September 27, 2026

A Python3 adaptation of the [original CUPS disclosure and PoC]( that runs as an ordinary local user against an existing CUPS service. It demonstrates a leaked `Authorization: Local` token and a race that lets CUPS write a file as root.

python3 cve_2026_34990.py --check # Test for a root-owned file write

python3 cve_2026_34990.py # Open a root shell

python3 cve_2026_34990.py -c 'id' # Run one command as root

Successful execution temporarily creates a sudoers entry, runs the requested action, and attempts to remove the entry and queues afterward.

Optional flags include `--cups-port`, `--listen-port`, `--proof-dir`, `--attempts`, and `--iterations`; see `--help`.

**Vulnerability discovery, original research, and original PoC:** [Asim Viladi Oglu Manizada (@manizada)]( as documented in the [OpenPrinting security advisory](

This repository's script adapts the published attack to run without root setup on an existing CUPS installation, adds a non-persistent proof mode, and attempts cleanup.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Vulnerability in CUPS Allows Local Privilege Escalation A vulnerability in CUPS (Common UNIX Printing System) version 2.4.16 allows local privilege escalation through improper authentication. Attackers can exploit this flaw by capturing the Local authorization token from the cupsd service, enabling them to execute commands as root. The attack involves setting up a rogue IPP server that challenges cupsd, which responds with its admin token. This token can then be reused to create a malicious print queue that writes to sensitive files, including sudoers configurations. The vulnerability is tracked as CVE-2026-34990, published on April 3, 2026, with the first public proof-of-concept released on August 6, 2026. CUPS versions 2.4.16 and earlier are affected, while version 2.4.17 and later are patched. Security professionals are advised to review their CUPS installations and apply updates promptly. 9 sources 71

Extracted Entities

Exploit for Improper Authentication in Openprinting Cups

The full story

Extracted Entities

Attack Types (1)

MITRE ATT&CK (1)

Platforms (1)