Read the docs
TI-2025-35903 Aliases CVE-2025-58060

cups has Authentication bypass with AuthType Negotiate

Priority HIGH 70CWE-287Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
Low · High · High
Fix status
Partial Red Hat: 33 fixed, 2 without a fix

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Red Hat. Impact type from CWE-287.

Summary

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.12 and earlier, when the `AuthType` is set to anything but `Basic`, if the request contains an `Authorization: Basic ...` header, the password is not checked. This results in authentication bypass. Any configuration that allows an `AuthType` that is not `Basic` is affected. Version 2.4.13 fixes the issue.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.01001 63rd percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Partial cups (OpenPrinting): 2.4.13Red Hat: 14 advisoriesRed Hat: 33 fixed, 2 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
OpenPrintingcupsbefore 2.4.132.4.13Patch availableCNA
  • cups VendorOpenPrinting Affected before 2.4.13 Fixed in 2.4.13 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:openprinting:cups:*:*:*:*:*:*:*:*before 2.4.13VulnerableOpenPrinting
  • cpe:2.3:a:openprinting:cups:*:*:*:*:*:*:*:* Versions before 2.4.13 Vulnerable ·OpenPrinting

Remediation

  • Fix · CNA cups (OpenPrinting) Fixed in 2.4.13

Red Hat 14 advisories

  • RHSA-2026:8814 Released 2026-04-17 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images cups-2.4.17-1.hum1@aarch64, cups-2.4.17-1.hum1@src, cups-2.4.17-1.hum1@x86_64 +14
  • RHSA-2026:0934 Released 2026-01-22 · Red Hat rating Important
    Release of OpenShift Serverless Logic 1.36.0 security update & enhancements
    • 8Base-Openshift-Serverless-1.36 openshift-serverless-1/logic-data-index-ephemeral-rhel8, openshift-serverless-1/logic-data-index-postgresql-rhel8, openshift-serverless-1/logic-db-migrator-tool-rhel8 +8
  • RHSA-2025:19894 Released 2025-11-13 · Red Hat rating Important
    OpenShift Container Platform 4.12.82 bug fix and security update
    • Red Hat OpenShift Container Platform 4.12 rhcos-x86_64-412.86.202510291903-0
Show 11 more Red Hat advisories
  • RHSA-2025:17164 Released 2025-10-01 · Red Hat rating Important
    cups security update
    • Red Hat Enterprise Linux AppStream AUS (v. 8.2) cups-1:2.2.6-33.el8_2.3, cups-client-1:2.2.6-33.el8_2.3, cups-devel-1:2.2.6-33.el8_2.3 +3
    • Red Hat Enterprise Linux BaseOS AUS (v. 8.2) cups-1:2.2.6-33.el8_2.3, cups-libs-1:2.2.6-33.el8_2.3
  • RHSA-2025:17144 Released 2025-10-01 · Red Hat rating Important
    cups security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) cups-1:2.2.6-45.el8_6.6, cups-client-1:2.2.6-45.el8_6.6, cups-devel-1:2.2.6-45.el8_6.6 +3
    • Red Hat Enterprise Linux AppStream E4S (v.8.6) cups-1:2.2.6-45.el8_6.6, cups-client-1:2.2.6-45.el8_6.6, cups-devel-1:2.2.6-45.el8_6.6 +3
    • Red Hat Enterprise Linux AppStream TUS (v.8.6) cups-1:2.2.6-45.el8_6.6, cups-client-1:2.2.6-45.el8_6.6, cups-devel-1:2.2.6-45.el8_6.6 +3
    • Red Hat Enterprise Linux BaseOS AUS (v.8.6) cups-1:2.2.6-45.el8_6.6, cups-libs-1:2.2.6-45.el8_6.6
    • Red Hat Enterprise Linux BaseOS E4S (v.8.6) cups-1:2.2.6-45.el8_6.6, cups-libs-1:2.2.6-45.el8_6.6
    • Red Hat Enterprise Linux BaseOS TUS (v.8.6) cups-1:2.2.6-45.el8_6.6, cups-libs-1:2.2.6-45.el8_6.6
  • RHSA-2025:17141 Released 2025-10-01 · Red Hat rating Important
    cups security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) cups-1:2.2.6-38.el8_4.3, cups-client-1:2.2.6-38.el8_4.3, cups-devel-1:2.2.6-38.el8_4.3 +3
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) cups-1:2.2.6-38.el8_4.3, cups-client-1:2.2.6-38.el8_4.3, cups-devel-1:2.2.6-38.el8_4.3 +3
    • Red Hat Enterprise Linux BaseOS AUS (v.8.4) cups-1:2.2.6-38.el8_4.3, cups-libs-1:2.2.6-38.el8_4.3
    • Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4) cups-1:2.2.6-38.el8_4.3, cups-libs-1:2.2.6-38.el8_4.3
  • RHSA-2025:17054 Released 2025-09-30 · Red Hat rating Important
    cups security update
    • Red Hat Enterprise Linux Server (v. 7 ELS) cups-1:1.6.3-52.el7_9.1, cups-client-1:1.6.3-52.el7_9.1, cups-devel-1:1.6.3-52.el7_9.1 +5
    • Red Hat Enterprise Linux Server Optional (v. 7 ELS) cups-ipptool-1:1.6.3-52.el7_9.1
  • RHSA-2025:17049 Released 2025-09-30 · Red Hat rating Important
    cups security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) cups-1:2.2.6-51.el8_8.5, cups-client-1:2.2.6-51.el8_8.5, cups-devel-1:2.2.6-51.el8_8.5 +3
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) cups-1:2.2.6-51.el8_8.5, cups-client-1:2.2.6-51.el8_8.5, cups-devel-1:2.2.6-51.el8_8.5 +3
    • Red Hat Enterprise Linux BaseOS E4S (v.8.8) cups-1:2.2.6-51.el8_8.5, cups-libs-1:2.2.6-51.el8_8.5
    • Red Hat Enterprise Linux BaseOS TUS (v.8.8) cups-1:2.2.6-51.el8_8.5, cups-libs-1:2.2.6-51.el8_8.5
  • RHSA-2025:16592 Released 2025-09-24 · Red Hat rating Important
    cups security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.4) cups-1:2.3.3op2-27.el9_4.1, cups-client-1:2.3.3op2-27.el9_4.1, cups-devel-1:2.3.3op2-27.el9_4.1 +4
    • Red Hat Enterprise Linux BaseOS EUS (v.9.4) cups-1:2.3.3op2-27.el9_4.1, cups-libs-1:2.3.3op2-27.el9_4.1
  • RHSA-2025:16591 Released 2025-09-24 · Red Hat rating Important
    cups security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) cups-1:2.3.3op2-16.el9_2.4, cups-client-1:2.3.3op2-16.el9_2.4, cups-devel-1:2.3.3op2-16.el9_2.4 +4
    • Red Hat Enterprise Linux BaseOS E4S (v.9.2) cups-1:2.3.3op2-16.el9_2.4, cups-libs-1:2.3.3op2-16.el9_2.4
  • RHSA-2025:16590 Released 2025-09-24 · Red Hat rating Important
    cups security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.0) cups-1:2.3.3op2-13.el9_0.4, cups-client-1:2.3.3op2-13.el9_0.4, cups-devel-1:2.3.3op2-13.el9_0.4 +4
    • Red Hat Enterprise Linux BaseOS E4S (v.9.0) cups-1:2.3.3op2-13.el9_0.4, cups-libs-1:2.3.3op2-13.el9_0.4
  • RHSA-2025:15700 Released 2025-09-11 · Red Hat rating Important
    cups security update
    • Red Hat Enterprise Linux AppStream (v. 9) cups-1:2.3.3op2-33.el9_6.1, cups-client-1:2.3.3op2-33.el9_6.1, cups-devel-1:2.3.3op2-33.el9_6.1 +4
    • Red Hat Enterprise Linux BaseOS (v. 9) cups-1:2.3.3op2-33.el9_6.1, cups-libs-1:2.3.3op2-33.el9_6.1
  • RHSA-2025:15702 Released 2025-09-11 · Red Hat rating Important
    cups security update
    • Red Hat Enterprise Linux AppStream (v. 8) cups-1:2.2.6-63.el8_10, cups-client-1:2.2.6-63.el8_10, cups-devel-1:2.2.6-63.el8_10 +3
    • Red Hat Enterprise Linux BaseOS (v. 8) cups-1:2.2.6-63.el8_10, cups-libs-1:2.2.6-63.el8_10
  • RHSA-2025:15701 Released 2025-09-11 · Red Hat rating Important
    cups security update
    • Red Hat Enterprise Linux AppStream (v. 10) cups-1:2.4.10-11.el10_0.1, cups-client-1:2.4.10-11.el10_0.1, cups-devel-1:2.4.10-11.el10_0.1 +3
    • Red Hat Enterprise Linux BaseOS (v. 10) cups-1:2.4.10-11.el10_0.1, cups-filesystem-1:2.4.10-11.el10_0.1, cups-libs-1:2.4.10-11.el10_0.1

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 6AffectedNo fix yet: Fix deferred
Red Hat OpenShift Container Platform 4AffectedNo fix planned: Will not fix
8Base-Openshift-Serverless-1.36Fixed RHSA-2026:0934
Red Hat Enterprise Linux AppStream (v. 10)Fixed RHSA-2025:15701
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2025:15702
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2025:15700
Red Hat Enterprise Linux AppStream AUS (v. 8.2)Fixed RHSA-2025:17164
Red Hat Enterprise Linux AppStream AUS (v.8.4)Fixed RHSA-2025:17141
Red Hat Enterprise Linux AppStream AUS (v.8.6)Fixed RHSA-2025:17144
Red Hat Enterprise Linux AppStream E4S (v.8.6)Fixed RHSA-2025:17144
Red Hat Enterprise Linux AppStream E4S (v.8.8)Fixed RHSA-2025:17049
Red Hat Enterprise Linux AppStream E4S (v.9.0)Fixed RHSA-2025:16590
Red Hat Enterprise Linux AppStream E4S (v.9.2)Fixed RHSA-2025:16591
Red Hat Enterprise Linux AppStream EUS (v.9.4)Fixed RHSA-2025:16592
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)Fixed RHSA-2025:17141
Red Hat Enterprise Linux AppStream TUS (v.8.6)Fixed RHSA-2025:17144
Red Hat Enterprise Linux AppStream TUS (v.8.8)Fixed RHSA-2025:17049
Red Hat Enterprise Linux BaseOS (v. 10)Fixed RHSA-2025:15701
Red Hat Enterprise Linux BaseOS (v. 8)Fixed RHSA-2025:15702
Red Hat Enterprise Linux BaseOS (v. 9)Fixed RHSA-2025:15700
Red Hat Enterprise Linux BaseOS AUS (v. 8.2)Fixed RHSA-2025:17164
Red Hat Enterprise Linux BaseOS AUS (v.8.4)Fixed RHSA-2025:17141
Red Hat Enterprise Linux BaseOS AUS (v.8.6)Fixed RHSA-2025:17144
Red Hat Enterprise Linux BaseOS E4S (v.8.6)Fixed RHSA-2025:17144
Red Hat Enterprise Linux BaseOS E4S (v.8.8)Fixed RHSA-2025:17049
Red Hat Enterprise Linux BaseOS E4S (v.9.0)Fixed RHSA-2025:16590
Red Hat Enterprise Linux BaseOS E4S (v.9.2)Fixed RHSA-2025:16591
Red Hat Enterprise Linux BaseOS EUS (v.9.4)Fixed RHSA-2025:16592
Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)Fixed RHSA-2025:17141
Red Hat Enterprise Linux BaseOS TUS (v.8.6)Fixed RHSA-2025:17144
Red Hat Enterprise Linux BaseOS TUS (v.8.8)Fixed RHSA-2025:17049
Red Hat Enterprise Linux Server (v. 7 ELS)Fixed RHSA-2025:17054
Red Hat Enterprise Linux Server Optional (v. 7 ELS)Fixed RHSA-2025:17054
Red Hat Hardened ImagesFixed RHSA-2026:8814
Red Hat OpenShift Container Platform 4.12Fixed RHSA-2025:19894
Not affected: 4 products
  • Red Hat Enterprise Linux 10
  • Red Hat Enterprise Linux 7
  • Red Hat Enterprise Linux 8
  • Red Hat Enterprise Linux 9

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-58060

References

Exploit 1

Patch 1

  • TI-2023-17077 CUPS vulnerable to use-after-free in cupsdAcceptClient() CVSS 3.1HIGH 7.1
  • TI-2026-27200 Path traversal in OpenPrinting cups CVSS 3.1MEDIUM 6.5
  • TI-2023-04157 OpenPrinting CUPS/libppd Postscript Parsing Heap Overflow CVSS 3.1HIGH 7.0
  • TI-2026-74874 Path traversal in OpenPrinting CUPS banner handling discloses files CVSS 3.1MEDIUM 5.3
  • TI-2026-27201 OpenPrinting CUPS: Heap overflow in `get_options()` CVSS 3.1MEDIUM 5.3
  • TI-2025-38265 OpenPrinting CUPS vulnerable to stack based out-of-bound write CVSS 3.1MEDIUM 6.7
See all 24 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences