CVE Database›Document archive›CVE-2026-91101

CVE-2026-91101

hplip: HPLIP: Remote Code Execution and Privilege Escalation Vulnerabilities

Loading…

Severity

Moderate

Red Hat Product Security

4.6

CVSS 3.1

Review impact separately from score.

Published · September 17, 2026

Updated · October 25, 2026

Description

A flaw was found in HPLIP (HP Linux Imaging and Printing) software. Multiple vulnerabilities within several components could allow a remote attacker to execute code on the system, gain elevated privileges, or access sensitive information. These issues could also lead to a denial of service, making the system unavailable, or unauthorized changes to files under certain conditions.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

To mitigate this vulnerability, if HPLIP functionality is not required, consider removing the hplip package. This action will remove support for HP printers and may impact printing capabilities. Use the system's package manager to perform this operation. For example, on Red Hat Enterprise Linux, execute sudo dnf remove hplip.

CVSS / CWE

CVSS 3.1 · 4.6
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-266 · Incorrect Privilege Assignment