CVE-2026-91100
hplip: HPLIP: Multiple vulnerabilities allow remote code execution, privilege escalation, and denial of service.
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · September 17, 2026
Updated · October 25, 2026
Description
A flaw was found in HP Linux Imaging and Printing (HPLIP) Software. Multiple vulnerabilities in several software components could allow a remote attacker to execute arbitrary code, escalate privileges, or cause a denial of service. Additionally, these flaws could lead to information disclosure or unauthorized file modification under certain conditions.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
If HP printer support is not required on the system, remove the HPLIP package to eliminate the attack surface. For Red Hat Enterprise Linux, use sudo dnf remove hplip. Removing this package will disable functionality for HP printers.
CVSS / CWE
CVSS 3.1 · 6.6CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L
CWE-266 · Incorrect Privilege Assignment