CVE-2026-4480

Name of the Vulnerable Software and Affected Versions Samba versions prior to 4.22.10 Samba versions prior to 4.23.8 Samba versions prior to 4.24.3

Description A flaw exists in the Samba printing subsystem where the software passes a client-controlled job description string to the command configured in the "print command" setting using the %J substitution character. Because shell meta characters are not escaped, an unauthenticated remote attacker can send a specially crafted print job description containing unescaped shell characters to execute arbitrary code on the affected system. This issue is particularly critical on servers with guest printer share access or unsafe default configurations.

Recommendations Update to version 4.22.10. Update to version 4.23.8. Update to version 4.24.3. As a temporary workaround, remove %J from the "print command" configurations in the smb.conf file.