CVE-2026-91098

A flaw was found in HP Linux Imaging and Printing (HPLIP) software. Multiple vulnerabilities exist that could allow a remote attacker to achieve remote code execution, escalate privileges, cause a denial of service, disclose information, or modify files without authorization under certain conditions.

This vulnerability is rated as Important severity because an unauthenticated attacker could trigger arbitrary code execution or elevate privileges if a local user interacts with malicious network resources. Red Hat Enterprise Linux systems typically install HPLIP only when configured for desktop environments or dedicated print servers requiring HP imaging support. Headless server installations that do not manage HP printing hardware or invoke HPLIP client utilities are not exposed to this flaw during standard operations.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.