A flaw in the Samba printing subsystem allows a remote attacker to inject shell metacharacters through the job description field. The job description is passed to the system’s print command via the "%J" placeholder without proper escaping, creating a command injection vulnerability. An attacker who submits a print job containing forged shell characters can cause arbitrary code to execute on the host with the privileges of the Samba service, potentially compromising confidentiality, integrity, and availability of the affected system.

The vulnerability affects Samba installations on Red Hat Enterprise Linux releases 6, 7, 8, 9, and 10, as well as the Red Hat OpenShift Container Platform 4. No specific Samba version numbers are listed, but all affected distributions ship the vulnerable code path.

The CVSS score of 9 indicates a high severity vulnerability, but the EPSS score is < 1%, indicating limited publicly known exploitation activity. The vulnerability is not currently listed in the CISA KEV catalog. The likely attack vector is inferred to be network-based: an adversary who can interact with the Samba service (e.g., via SMB) can send a crafted print job to trigger the injection. If exploited, the attacker gains code execution on the host as the user running Samba.