CVE-2026-5064: HP One Agent Software – Security Update

Synopsis

A local privilege escalation and denial-of-service vulnerability affects HP One Agent Software versions prior to 1.3.214.7339. The vulnerability is reachable only from the local host and requires a low-privilege account, meaning an attacker needs an existing foothold on the machine. Successful exploitation grants full read and write access to confidential data and the ability to crash or disrupt the affected service. A patched-image rebuild at version 1.3.214.7339 is available on HarborGuard for affected environments.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityNot required

  The attacker needs an existing shell or process on the host; the vulnerability is not reachable over the network.

• AuthenticationRequired

  Any low-privilege local account is sufficient; no administrative or elevated credentials are needed.

• Victim interactionNot required

  No victim interaction is required; the attacker can exploit the vulnerability without any user action.

• Attack complexityDetail

  Attack complexity is low, meaning the exploit is reliable and does not depend on race conditions or specific environmental factors.

Blast Radius

• Reads confidential files and data accessible on the host, including credentials or session material stored by the HP One Agent process.
• Modifies or overwrites files and system state at a privilege level above what the attacker's account normally permits.
• Crashes or disrupts the HP One Agent service, causing loss of management or monitoring functionality on the affected host.