CVE-2026-91105

A flaw was found in HPLIP. Multiple vulnerabilities in several software components could potentially allow a remote attacker to achieve remote code execution or privilege escalation under certain conditions, requiring user interaction. These flaws could also lead to denial of service, information disclosure, or unauthorized file modification.

Red Hat has rated this vulnerability as Important because successful exploitation could lead to privilege elevation or arbitrary code execution in the context of the printing subsystem if an unprivileged user or remote actor triggers the flawed routines. HPLIP is typically installed as part of desktop environments or dedicated print servers interacting with HP hardware, rather than standard headless enterprise server deployments. Exploitation requires specific conditions, including active user interaction or processing manipulated inputs, which limits automated or unattended attacks on enterprise systems.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.