Executive brief
HP ImageDiags is a diagnostic utility used by HP system administrators to analyze and troubleshoot hardware issues. A privilege escalation vulnerability in versions before 5.0.0.36 allows local users to gain elevated system privileges through insufficient access control mechanisms, potentially giving attackers the ability to take control of affected systems.
Technical details
The vulnerability is a privilege escalation flaw caused by insufficient access controls in HP ImageDiags. It requires local access to the affected system to exploit. A local attacker can leverage improper permission handling to escalate their privileges and gain administrative control. The vulnerability affects all versions prior to 5.0.0.36, and a patch is available in version 5.0.0.36 and later. No evidence of active exploitation in the wild has been reported.
Affected products
- HP ImageDiags prior to 5.0.0.36
Timeline
- 2026-08-31: disclosed