CVE-2026-15431

CVE-2026-15431 is a local privilege escalation flaw in HP Support Assistant, HP's preinstalled PC support and maintenance agent, caused by insufficient access controls (CWE-1220) in versions prior to 9.53.2.0. An attacker who already has low-privileged local access to a PC running the vulnerable agent can trigger the flaw without user interaction, gaining elevated access to the system (the CVSS 4.0 vector rates the impact on confidentiality, integrity, and availability of the vulnerable system as high). Successful exploitation would let the attacker run code with elevated rights, enabling full control and persistence on the affected machine. Any HP consumer or business Windows PC with HP Support Assistant older than 9.53.2.0 is affected. There is currently no public proof-of-concept, no CISA KEV listing, and a very low EPSS score (0.1%), indicating no known exploitation.

What to do: Update HP Support Assistant to version 9.53.2.0 or later, using the agent's built-in update function or HP's support site, and verify the installed version on each managed PC. Because exploitation requires local access, prioritize shared or multi-user machines and systems where untrusted users hold local accounts. No workaround or alternative mitigation is described in the advisory data.