Cameras
Mirrorless Cameras DSLR Cameras Compact Cameras Speedlite Flashes Wireless Transmitters Other

Lenses
Mirrorless Lenses DSLR Lenses Binoculars Monoculars

Video
Consumer Camcorder Professional Camcorder

Printers
Megatank and Home Printers Office Printers Compact Portable Printers

Large Format Printers
Graphic Poster Signage Printers Technical Document Printers

Copiers & MFP
imageFORCE imagePRESS LITE imageRUNNER ADVANCE DX imageRUNNER

Production
Color Sheetfed Digital Presses Monochrome Sheetfed Digital Presses

Scanners
Office Scanners Production Scanners Mobile Scanners Check Scanners Photo Scanners Wifi & Network Scanners

Office
Projectors Calculators Presenters Fax Machines

Software Solutions
Output Management Information Management Workflow Document Capture Distribution Mobile Solutions Poster Creation Software

CPA2026-004: Vulnerability Remediation for My Image Garden for macOS and CUPS Printer Driver for macOS

May 28, 2026
Canon Inc.

Description:

Canon U.S.A., Inc. has recently become aware of a vulnerability involving improper validation of symbolic links in the installers for My Image Garden for macOS and IJ Mac Printer Driver. During the installation of My Image Garden for macOS and IJ Mac Printer Driver, a third party with local access to and login privileges on the PC could potentially exploit this vulnerability by using a specially crafted symbolic link to modify the permissions of files or directories for which they would not normally have authorization.

Affected Products:

  • My Image Garden for macOS
    Example of file download name: My Image Garden Ver.x.x.x (Mac)
  • CUPS Printer Driver for macOS
    Example of file download name: series CUPS Printer Driver Ver. xx.xx.x.x (Mac)

For details of the affected software titles and versions, please refer to your product’s Software & Drivers download page.

Mitigation/Remediation:

Software and drivers designed to address are available on Canon USA’s website. We recommend that our customers install the latest macOS software for My Image Garden and CUPS Printer Driver.

CVE / CVSS:

CVE-2026-6891: Improper handling of symbolic links in the installer of My Image Garden for macOS.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N Base Score: 5.1.
CVE-2026-6892: Improper handling of symbolic links in the installer for IJ Mac Printer Driver

CVE-2026-6892: Improper handling of symbolic links in the installer of the CUPS Printer Driver for macOS.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N Base Score: 5.1.

Canon would like to thank the following researchers for identifying this vulnerability:

  • CVE-2026-6891 and CVE-2026-6892: Jie Wan
GET PRODUCTS
Want to buy a product? Let us help you find where you can.
WHERE TO BUY
GET SUPPORT
Need help with your product? Let us help you find what you need.
PRODUCT SUPPORT
GET SERVICE
Need to service your product? Let us help you find where you can.
SERVICE LOCATOR