CVE-2025-61915

low-risk

Published 2025-11-29

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to version 2.4.15, a user in the lpadmin group can use the cups web ui to change the config and insert a malicious line. Then the cupsd process which runs as root will parse the new config and cause an out-of-bound write. This issue has been patched in version 2.4.15.

Do I need to act?

0.03% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 6.0/10 Medium

LOCAL / LOW complexity

Affected Products (1)

Cups

Affected Vendors

Openprinting

References (5)

Patch https://github.com/OpenPrinting/cups/commit/db8d560262c22a21ee1e55dfd62fa98d9359...

Release Notes https://github.com/OpenPrinting/cups/releases/tag/v2.4.15

Exploit https://github.com/OpenPrinting/cups/security/advisories/GHSA-hxm8-vfpq-jrfc

Mailing List http://www.openwall.com/lists/oss-security/2025/11/27/5

Exploit https://github.com/OpenPrinting/cups/security/advisories/GHSA-hxm8-vfpq-jrfc

/ 100

low-risk

Severity 20/34 · Moderate

Exploitability 0/34 · Minimal

Exposure 5/34 · Minimal