The OMEN Gaming Hub suffers from an insufficient access control flaw that allows a local attacker to elevate privileges and potentially access sensitive information. The weakness, classified as CWE-347, permits a user with local system access to bypass normal permission checks, thereby gaining higher-level rights within the application or the underlying operating system.

The vulnerability affects HP Inc’s OMEN Gaming Hub in all releases prior to 1101.2608.0.0. Users running these older versions are at risk when the application is executed on a system where a local user could exploit the access control lapse.

With a CVSS score of 8.2, the flaw is considered high severity, and while no EPSS data is available, the lack of presence in the CISA KEV catalog suggests no widespread, publicly known exploitation to date. Given that the attack vector is local, any user with physical or remote workstation access can target the issue, potentially escalating privileges and gaining unauthorized information. The severity of the impact combined with the high CVSS score underscores the need for timely remediation.