CVE-2026-91101
hplip: HPLIP: Remote Code Execution and Privilege Escalation Vulnerabilities
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · September 17, 2026
Updated · October 25, 2026
Description
A flaw was found in HPLIP (HP Linux Imaging and Printing) software. Multiple vulnerabilities within several components could allow a remote attacker to execute code on the system, gain elevated privileges, or access sensitive information. These issues could also lead to a denial of service, making the system unavailable, or unauthorized changes to files under certain conditions.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
To mitigate this vulnerability, if HPLIP functionality is not required, consider removing the hplip package. This action will remove support for HP printers and may impact printing capabilities. Use the system's package manager to perform this operation. For example, on Red Hat Enterprise Linux, execute sudo dnf remove hplip.
CVSS / CWE
CVSS 3.1 · 4.6CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-266 · Incorrect Privilege Assignment