CVE-2026-91103
hplip: HPLIP: Multiple vulnerabilities leading to remote code execution, privilege escalation, and denial of service
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · September 17, 2026
Updated · October 25, 2026
Description
A flaw was found in HPLIP (HP Linux Imaging and Printing) software. This issue encompasses multiple vulnerabilities across several components, potentially allowing an attacker to achieve remote code execution, elevate their privileges, or cause a denial of service. Additionally, these flaws could lead to information disclosure or unauthorized file modification under certain conditions.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
HPLIP is a collection of drivers for HP printers. If HP printers are not in use, the hplip package can be removed to eliminate the attack surface.
To remove the package:
sudo dnf remove hplip
This action may affect printing functionality for HP devices.
CVSS / CWE
CVSS 3.1 · 6.3CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CWE-266 · Incorrect Privilege Assignment