A public PoC exploit, cups2root, chains a CUPS privilege escalation to take lpadmin users to root. No CVE or patch yet. See the mechanism and mitigations.
#cups2root #CUPS #PrivilegeEscalation #LinuxSecurity #ZeroDay #lpadmin #PoC #RootExploit
#cups2root #CUPS #PrivilegeEscalation #LinuxSecurity #ZeroDay #lpadmin #PoC #RootExploit
cups2root: Public PoC Exploit Escalates lpadmin to Root on CUPS
TL;DR A researcher published cups2root, a working proof-of-concept that escalates a local lpadmin user to root on CUPS. The exploit chains several configuration and privilege-boundary flaws. No CVE, vendor advisory, or patch exists yet. The PoC code is already public on GitHub. Why This CUPS Privilege Escalation Matters CUPS ships on most Linux desktops and many servers. As a result, the lpadmin group is common on real systems.
securityonline.info
September 22, 2026 at 1:02 AM
A public PoC exploit, cups2root, chains a CUPS privilege escalation to take lpadmin users to root. No CVE or patch yet. See the mechanism and mitigations.
#cups2root #CUPS #PrivilegeEscalation #LinuxSecurity #ZeroDay #lpadmin #PoC #RootExploit
#cups2root #CUPS #PrivilegeEscalation #LinuxSecurity #ZeroDay #lpadmin #PoC #RootExploit
PoC for CUPS LPE on Linux https://github.com/v12-security/pocs/tree/main/cups/cups2root
pocs/cups/cups2root at main · v12-security/pocs
poc it like it's hot. Contribute to v12-security/pocs development by creating an account on GitHub.
github.com
September 18, 2026 at 6:42 PM
PoC for CUPS LPE on Linux https://github.com/v12-security/pocs/tree/main/cups/cups2root