CVE-2026-123747

A directory traversal vulnerability exists in pappl-retrofit due to insufficient sanitization of user-supplied filenames during the upload and deletion of PostScript Printer Description (PPD) files. A remote, unauthenticated attacker can exploit this by submitting filenames containing path traver...