OpenPrinting CUPS (Common UNIX Printing System) versions up to 2.4.16 contain an authorization bypass vulnerability (CWE-863) due to case-insensitive username comparison in the authorization logic of the CUPS daemon (cupsd). This flaw permits an attacker with a username differing only in case from an authorized user to bypass access controls and execute restricted operations. The vulnerability is network exploitable with high attack complexity and requires privileges and user interaction. No official remediation or patch is currently available.

An attacker with an unprivileged account on the affected system can gain unauthorized access to restricted CUPS operations by exploiting the case-insensitive username comparison flaw. This could lead to unauthorized information disclosure (confidentiality impact is high) and limited integrity impact. There is no impact on availability. No known exploits are reported in the wild at this time.

At the time of this report, no patches or official fixes are available for this vulnerability. Users should monitor the OpenPrinting project for updates and apply patches once released. Until then, consider restricting user account creation and carefully managing user privileges to limit potential exploitation. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.