OpenPrinting CUPS (Common UNIX Printing System) versions up to 2.4.16 contain a CWE-863 incorrect authorization vulnerability. The CUPS daemon (cupsd) performs authorization checks using case-insensitive username comparisons, which can be exploited by an attacker who creates a username differing only in case from a privileged user. This bypasses intended access controls, granting unauthorized access to restricted printing operations. No official patch or remediation is currently available, and no known exploits are reported in the wild.

Successful exploitation allows an unprivileged user to bypass authorization controls and gain access to restricted operations within the CUPS printing system. This could lead to unauthorized printing management actions. The CVSS score of 4.8 reflects a medium severity with high confidentiality impact, low integrity impact, and no availability impact. There are no reports of active exploitation.

At present, no official patches or fixes are available for this vulnerability. Users should monitor the OpenPrinting project for updates and advisories. Until a patch is released, consider restricting user creation policies to prevent usernames differing only by case and limit access to the CUPS service to trusted users only.