Skip to content
CVE-2026-123747: Directory Traversal Flaw in pappl-retrofit

CVE-2026-123747: Directory Traversal Flaw in pappl-retrofit

First seen 12 Nov 2026, 07:48 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 12, 2026 at 07:49 UTC
  • •CVE-2026-123747 allows unauthenticated attackers to exploit pappl-retrofit.
  • •The vulnerability can lead to data corruption and arbitrary command execution.
  • •Default installations of affected systems are not vulnerable without manual configuration.

A directory traversal vulnerability (CVE-2026-123747) was discovered in pappl-retrofit, allowing unauthenticated remote attackers to manipulate or delete arbitrary files by exploiting improper filename sanitization during PPD file handling. This flaw could lead to data corruption, denial of service, or arbitrary command execution. The vulnerability has been rated as Important by Red Hat due to the potential for exploitation if the service is exposed and improperly configured. Default installations of Red Hat Enterprise Linux and Fedora are not vulnerable unless the required storage directory is manually set up with administrative privileges. The flaw was published on November 11, 2026, but no immediate patch or mitigation is available. Organizations running network-accessible print-management services should prioritize monitoring and restricting access to mitigate risks.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 5h ago How this analysis works

Timeline

2026-11-11
CVE-2026-123747 published
The vulnerability was disclosed, highlighting risks associated with pappl-retrofit.
Redpacketsecurity

More articles in this cluster (3)

Following this threat?

Track Fedora and CVE-2026-123747 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (7)

1 / 4

Common questions

How can I determine if I'm affected?
Check if your installation of pappl-retrofit has the required storage directory manually set up with administrative privileges.
What is the severity of this vulnerability?
The vulnerability has been rated as Important due to the potential for exploitation by unauthenticated attackers.
What should I do until a patch is available?
Restrict network access to trusted management hosts and monitor for unusual file operations.