CVE-2013-4325: The check_permission_v1 function in base/pkit.py in HP Linux Imaging and Printing (HPLIP) through 3.13.9 do...

Security readout for executives and security teams

This is a local access-control bypass in HP Linux Imaging and Printing through 3.13.9. A user already on a Linux system could exploit a race in how HPLIP asks polkit for authorization, potentially performing actions HPLIP meant to restrict. It is not described as remotely exploitable, but it matters on shared workstations, print servers, or multi-user Linux hosts. Exposure is most likely on Linux systems with HPLIP installed at version 3.13.9 or earlier, especially distro-managed workstation or print-server environments. The source bundle does not identify remote exposure or non-Linux products. Treat this as a moderate priority legacy Linux hygiene issue. It is local-only based on available evidence, but patching is warranted on shared endpoints and print servers because it weakens authorization controls. Mitigation focus: Identify systems running HPLIP 3.13.9 or earlier.; Apply relevant vendor security updates from Red Hat, Ubuntu, Debian, or SUSE.; Check current vendor guidance for supported package names and fixed versions..

Prepared

Jun 14, 2026, 15:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.