CVE-2026-91102

A flaw was found in HP Linux Imaging and Printing (HPLIP) software. Multiple vulnerabilities exist within several software components that could potentially allow an attacker to achieve remote code execution, escalate privileges, cause a denial of service, disclose information, or modify files without authorization under certain conditions.

Red Hat has classified this vulnerability with an Important severity rating because, despite requiring local user interaction, successful exploitation permits complete compromise of host integrity, confidentiality, and service availability. In standard Red Hat Enterprise Linux deployments, the HPLIP suite is primarily utilized on workstations and print gateways interfacing with HP peripherals, leaving minimal or headless server installations largely unexposed. Consequently, the operational risk is confined to systems actively executing HP printing utilities or processing untrusted print tasks.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To reduce the attack surface, restrict network access to systems running HPLIP if network printing or remote management features are not actively used. Alternatively, if HPLIP functionality is not required, the hplip package can be removed. To remove the package: sudo dnf remove hplip Removing the package will impact printing capabilities for HP devices.