High severity · published Dec 9, 2025
CVE-2025-11531
HP System Event Utility and Omen Gaming Hub might allow execution of certain files outside of their restricted paths
8.8
CVSS
0.4%
EPSS
No
On KEV
Description
HP System Event Utility and Omen Gaming Hub might allow execution of
certain files outside of their restricted paths. This
potential vulnerability was remediated with HP System
Event Utility version 3.2.12 and Omen Gaming Hub version
1101.2511.101.0.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 34% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OG
Omen Gaming Hub · HP
before 1101.2511.101.0 · source: NVD
SE
System Event Utility · HP
before 3.2.12 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-11531
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-11531
Vendor Advisory
https://support.hp.com/us-en/document/ish_13537533-13537555-16/hpsbgn04079
More from Omen Gaming Hub
9.8
CVE-2021-3919
A potential security vulnerability has been identified in OMEN Gaming Hub and in HP Command Center which may allow escalation of privilege and/or denial of service
9.8
CVE-2021-3437
Potential security vulnerabilities have been identified in an OMEN Gaming Hub SDK package which may allow escalation of privilege and/or denial of service