CVE-2026-12555

CVE-2026-12555 is a privilege escalation vulnerability found in HP Easy Start for macOS, affecting versions prior to 2.16.7.260722. This flaw, categorized under CWE-379 (Creation of Temporary File in Directory with Insecure Permissions), stems from the HP Easy Start Uninstaller component utilizing predictable, world-writable paths for temporary files while operating with administrative privileges. A local attacker can exploit this by creating symbolic links at these insecure temporary file locations before the privileged process starts. When the uninstaller accesses these paths, it may follow the attacker-controlled symlink, leading to privileged file modification or corruption, such as appending application-generated log data to an attacker-chosen target. HP has released updated software to address this issue.