CVE-2026-4480

Published May 26, 2026

Last updated 19 hours ago

Overview

AI description

Automated description summarized from trusted sources.

CVE-2026-4480 describes a vulnerability found within the Samba printing subsystem. This flaw arises because Samba transmits the client-controlled job description string to the command configured by the "print command" setting, utilizing the "%J" substitution character, without adequately escaping shell meta characters. Consequently, a remote attacker can exploit this vulnerability by submitting a specially crafted print job description that incorporates unescaped shell characters. This action could lead to remote code execution on the affected system.

Description
A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with the "print command" setting via the "%J" substitution character without escaping shell meta characters. A remote attacker could exploit this vulnerability by sending a specially crafted print job description that contains unescaped shell characters. This could lead to remote code execution on the affected system.
Source
secalert@redhat.com
NVD status
Modified
Products
openshift_container_platform, samba, enterprise_linux

Risk scores

CVSS 3.1

Type
Secondary
Base score
9
Impact score
6
Exploitability score
2.2
Vector string
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Severity
CRITICAL

Weaknesses

secalert@redhat.com
CWE-78

Social media

Hype score
Not currently trending

Configurations