CVE-2026-91104

A flaw was found in HPLIP. A heap-based buffer overflow could potentially allow an attacker to achieve code execution, escalate privileges, cause a denial of service, disclose sensitive information, or perform unauthorized file modifications under certain conditions.

This vulnerability allows an unauthenticated attacker to achieve arbitrary code execution and privilege escalation, among other security impacts.

HPLIP provides printer drivers and tools for managing HP devices. The client tools are not exposed to the network. Printer, scanner, and fax drivers are used by CUPS (once configured with a print queue). The driver binaries are executed within a restricted environment under the unprivileged 'lp' user. This limits exploitation to a local attacker and restricts code execution to the unprivileged 'lp' user.

For these reasons, this issue has been rated with an important severity.

Default Red Hat Enterprise Linux security features, including SELinux enforcement, Address Space Layout Randomization (ASLR) and NX (No-Execute) stack protection, significantly increase the difficulty of achieving arbitrary code execution, limiting the impact of this vulnerability.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this vulnerability, consider removing the hplip package if its functionality is not required by using the command indicated below. Note this will remove HP printer support and related utilities from the system.

sudo dnf remove hplip