The vulnerability CVE-2026-8632 affects HP Linux Imaging and Printing Software (HPLIP) and is classified under CWE-77 and CWE-78, indicating improper neutralization of special elements leading to OS command injection. A local attacker with low privileges can exploit this flaw to execute unauthorized OS commands, potentially escalating privileges and executing arbitrary code. The vulnerability impacts confidentiality, integrity, and availability of affected systems. Red Hat's advisory confirms the issue and provides updated hplip packages for Red Hat Enterprise Linux 10.0 Extended Update Support to remediate the vulnerability.

Exploitation of this vulnerability can lead to unauthorized code execution and privilege escalation on affected systems. Attackers may execute OS commands with the privileges of the vulnerable application, potentially disabling the product, reading or modifying data without proper permissions, and hiding malicious activities under the application's identity. The impact affects confidentiality, integrity, and availability of the system.

Red Hat has released official security updates for the hplip package in Red Hat Enterprise Linux 10.0 Extended Update Support to fix this vulnerability. Users should apply these updates promptly to remediate the issue. Refer to Red Hat advisory RHSA-2026:48606 and https://access.redhat.com/articles/11258 for update instructions. No alternative mitigations are specified by the vendor.