The vulnerability involves an uncontrolled search path element (CWE-427) in the pc-printer-updater.exe component of PaperCut Print Deploy Client. The application runs with elevated privileges and calls a secondary utility using an unqualified file name rather than an absolute path. This reliance on the OS's default search order can be exploited by a local attacker who can insert a malicious binary earlier in the search path, causing the malicious code to execute with SYSTEM-level privileges.

Successful exploitation can lead to execution of arbitrary code with SYSTEM privileges on the affected host, resulting in a full compromise of the system. The vulnerability requires local access and the ability to modify directories in the system search path. There are no known exploits in the wild as of the published date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict local user permissions to prevent modification of directories in the system search path and avoid running the vulnerable component with elevated privileges if possible.