CVE-2026-91097

HP has disclosed a set of externally reported vulnerabilities in HPLIP, its Linux imaging and printing driver suite, including at least one out-of-bounds write (CWE-787). Under certain conditions, the affected HPLIP components can enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification. The CVSS 4.0 vector indicates network-based exploitation with no privileges required but user interaction needed, with high integrity impact — consistent with a crafted file, print, or scan job being processed by an affected component. Anyone running HPLIP on Linux (it ships in the repositories of all major distributions to support HP printers and scanners) is potentially affected. No public proof-of-concept, CISA KEV listing, or confirmed exploitation is known at this time.

What to do: Update HPLIP to the latest release from HP or install your distribution's patched package, and verify the installed version with your package manager or hp-check. Since user interaction is required for exploitation, avoid processing untrusted print jobs, scan inputs, or files on Linux hosts running HPLIP. Inventory Linux endpoints with HPLIP installed and prioritize systems where untrusted users can submit print or scan jobs.