Executive Summary

This vulnerability exists in the pc-printer-updater.exe component of the PaperCut Print Deploy Client for Windows. The application runs with high-level system privileges and tries to perform an internal validation by calling a secondary system utility using an unqualified file name.

Because it does not specify the absolute path to this utility, it relies on the operating system's default search order to find the executable. A local attacker who can modify directories in the system's search path could place a malicious binary that mimics the expected utility.

If successful, this malicious code would be executed with SYSTEM privileges, potentially leading to a full compromise of the affected host.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can allow a local attacker to execute malicious code with SYSTEM-level privileges on the affected machine.

Such an exploit could lead to a full compromise of the host, giving the attacker complete control over the system.

Useful 0 Not Useful 0

Mitigation Strategies

To mitigate CVE-2026-6645, users should immediately update PaperCut NG/MF to the latest patched version provided by the vendor.

This vulnerability allows unauthorized remote code execution without authentication, so applying the update promptly is critical to prevent potential full system compromise.

Useful 0 Not Useful 0