CVE-2026-123747

A flaw was found in pappl-retrofit. The application fails to properly sanitize user-supplied filenames when handling the upload and deletion of PostScript Printer Description PPD files. A remote, unauthenticated attacker can exploit this directory traversal flaw by submitting filenames containing...