CVE-2026-91097

A flaw was found in HPLIP (HP Linux Imaging and Printing) software. Multiple vulnerabilities exist that could allow a remote attacker to execute arbitrary code, escalate privileges, cause a denial of service, disclose sensitive information, or modify files without authorization. These issues arise under specific, unspecified conditions.

This vulnerability is rated as Important severity because successful exploitation could permit an authenticated or adjacent attacker to execute unauthorized code or elevate privileges across print management components. On Red Hat Enterprise Linux, HPLIP is generally deployed alongside desktop environments or dedicated print server roles rather than minimal base installations. Systems that do not configure HP printing devices or do not expose print services to untrusted networks carry significantly reduced operational risk.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, if HPLIP functionality is not required, consider removing the hplip package. This can be done using the following command:

sudo dnf remove hplip

Removing this package will disable HP printer support and related utilities.