Executive brief
HP OMEN Gaming Hub is a gaming-focused software platform bundled on HP gaming computers. A local privilege escalation vulnerability allows an attacker with user-level access to gain elevated system privileges due to weak access control mechanisms, potentially allowing unauthorized system modifications or data access.
Technical details
The vulnerability is a privilege escalation flaw stemming from insufficient access controls in OMEN Gaming Hub. An unauthenticated local attacker with standard user privileges can exploit this to escalate to elevated (administrator or system) privileges. The attack vector is local only and does not require network access or special user interaction beyond basic system access. Successful exploitation allows an attacker to modify system settings, install software, or access sensitive data. Versions prior to 1101.2608.0.0 are affected; HP has released patched versions that restrict privileged operations.
Affected products
- HP OMEN Gaming Hub prior to 1101.2608.0.0
Timeline
- 2026-08-21: disclosed
- 2026-08-21: patched: Version 1101.2608.0.0 and later contain fix