Public PoC Released for CUPS Vulnerability Allows Attackers to Gain Root Privileges

A public proof-of-concept (PoC) has been released for CVE-2026-39875, a macOS vulnerability in the Common UNIX Printing System (CUPS) that allows an unprivileged local user to perform arbitrary file writes with root privileges. The flaw affects macOS Sonoma, Sequoia, and Tahoe versions before macOS 14.8.8, 15.7.8, and 26.6. The PoC, published by security researcher Dallas Dubs, demonstrates how two logic flaws in the privileged cupsd printing daemon can be chained. Although the public code demonstrates a root-level arbitrary file write rather than a complete interactive root shell, such a capability can create a realistic path to local privilege escalation depending on the targeted file and system configuration. The flaw allows a...

Læs hele artiklen hos kilden.