Is there a patch available for CVE-2026-4667?

Yes, a patch is available for CVE-2026-4667. Update the affected software to the latest version immediately.

HP Omen Gaming Hub CVE-2026-4667

Q: What is the CVSS score of CVE-2026-4667?

CVE-2026-4667 has a CVSS 4.0 base score of 7.3 (High). CVSS vector: CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-22947 HIGH

Execution with Unnecessary Privileges (CWE-250)

2026-04-15 hp

GHSA-f7xm-7w7h-hhcm

HP Privilege Escalation Omen Gaming Hub

7.3

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

7.3 HIGH

CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

7.8 HIGH

Local attack requires only low privileges and no user interaction, leading to total system impact.

3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.0 AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from NVD.

CVSS VectorNVD

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Jul 26, 2026 - 15:33 vuln.today

Patch released

Apr 17, 2026 - 15:09 nvd

Patch available

Apr 16, 2026 - 05:29 EUVD

1101.2603

CVSS changed

Apr 15, 2026 - 15:22 NVD

7.3 (HIGH)

EUVD ID Assigned

Apr 15, 2026 - 15:00 euvd

EUVD-2026-22947

CVE Published

Apr 15, 2026 - 14:22 nvd

HIGH 7.3

DescriptionCVE.org

HP System Optimizer might potentially be vulnerable to escalation of privilege. HP is releasing an update to mitigate this potential vulnerability.

AnalysisAI

Local privilege escalation in HP Omen Gaming Hub versions prior to 1101.2603 allows a low-privileged local attacker to execute arbitrary code with SYSTEM privileges. A public proof-of-concept detection template exists, but no active exploitation has been reported. The vulnerability is rated High severity with an EPSS of 0.01%, indicating low near-term exploitation probability.

Technical ContextAI

The vulnerability is classified as CWE-250: Execution with Unnecessary Privileges. HP Omen Gaming Hub, identified by CPE cpe:2.3:a:hp_inc.:omen_gaming_hub, includes a component (likely a background service or agent) that runs with elevated SYSTEM rights. A local authenticated user can leverage this overly privileged process to execute arbitrary operations outside the intended user context, leading to full system compromise. The vendor advisory (HP HPSBGN04101) confirms the flaw and provides a patched version.

RemediationAI

Upgrade HP Omen Gaming Hub to version 1101.2603 or later, as detailed in HP advisory HPSBGN04101. No official workaround is documented. If immediate patching is not possible, consider uninstalling the software or strictly controlling interactive local user access until the update can be applied. Note that uninstalling the hub may remove gaming-specific performance and lighting management features.