EUVD-2026-56531
GHSA-r6qv-xgx8-q8fx
Severity by source
CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attacker is described as unprivileged (PR:L), local access required (AV:L), privileged-user execution needed (UI:R); no scope change, full CIA impact on vulnerable system.
Primary rating from Vendor (intel).
CVSS VectorVendor: intel
Lifecycle Timeline
1DescriptionCVE.org
Uncontrolled search path for some Hardware-Aware-Automated-MachineLearning NA before version 45cd723 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires passive user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
AnalysisAI
Privilege escalation in Intel's Hardware-Aware-Automated-MachineLearning (NA) software before commit 45cd723 stems from an uncontrolled search path element (CWE-427) in its Ring 3 user-space application layer. An unprivileged local attacker who can write to a directory within the application's library or executable search path can plant a malicious artifact; when a high-privileged user subsequently runs the AutoML tool, the application loads the attacker-controlled file and executes code at the elevated privilege level. No public exploit code has been identified at time of analysis and the vulnerability is not listed in the CISA KEV catalog, though the CVSS 4.0 score of 5.4 (Medium) reflects the attack requirements and required user interaction that constrain real-world exploitation.
Technical ContextAI
CWE-427 (Uncontrolled Search Path Element) describes a class of vulnerabilities where an application resolves the location of a required library, plugin, or executable by traversing a sequence of directories that can be influenced by a less-trusted principal - typically through environment variables such as PATH, LD_LIBRARY_PATH, or PYTHONPATH, or through writable directories appearing earlier in the search order than the legitimate file location. The affected product, identified by CPE cpe:2.3:a:n/a:hardware-aware-automated-machinelearning_na, is an Intel-developed AutoML framework targeting hardware-aware neural architecture search (NAS) workflows. Operating entirely in Ring 3 (user-space), the software has no kernel-mode component, meaning privilege escalation is achieved by inheriting the execution context of a high-privileged user who launches the application rather than by exploiting a kernel boundary. The CVSS 4.0 vector AV:L/AC:L/AT:P/PR:H/UI:P confirms local access is required, attack requirements (AT:P) must be satisfied (writable path position ahead of the legitimate binary), and passive interaction from a privileged user is necessary.
RemediationAI
The upstream fix is available as commit 45cd723 in the Hardware-Aware-Automated-MachineLearning NA repository; however, a formally tagged release version corresponding to this commit has not been independently confirmed from the available data - consult the Intel security advisory INTEL-SA-01485 at https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01485.html for an authoritative patch version and download location. As an interim compensating control, restrict write permissions on all directories included in the search paths (PATH, LD_LIBRARY_PATH, PYTHONPATH, or equivalent) used by the AutoML application to prevent unprivileged users from inserting files; note that overly restrictive path permissions may break dependent toolchains in development environments and should be tested before broad rollout. Additionally, run the AutoML software under a dedicated low-privilege service account rather than as an administrator or root user, which limits the impact of a successful search-path hijack to that account's privilege level rather than full system compromise. Where feasible, use absolute paths for all library and binary references in launch scripts and configuration files to eliminate reliance on the search path entirely.
LibreNMS before 24.10.0 allows a remote attacker to execute arbitrary code via OS command injection involving AboutContr
Reachable assertion in Open5GS up to version 2.7.6 allows remote unauthenticated attackers to crash the Diameter CER han
A Command Injection issue in the payload build page in BYOB (Build Your Own Botnet) 2.0 allows attackers to execute arbi
Denial of service in Open5GS 2.7.6 and earlier allows network-adjacent attackers with low-privilege Diameter Gx peer acc
Denial of service in Open5GS HSS (Home Subscriber Server) versions 2.7.0 through 2.7.6 is triggered remotely by manipula
Remote command injection in Control Web Panel allows unauthenticated attackers to execute arbitrary OS commands as root
LINQPad before 5.52.01 Pro edition is vulnerable to Unsafe Deserialization in LINQPad.AutoRefManager::PopulateFromCache(
Remote code execution in dash-uploader (Python package for Plotly Dash) versions 0.1.0 through 0.7.0a2 allows unauthenti
Command injection in LiteLLM 1.18.10 lets attackers who can configure MCP (Model Context Protocol) servers supply arbitr
SQL injection in AzuraCast's backup restore flow (versions up to and including 0.23.7) lets an attacker achieve privileg
Arbitrary file read in Yu AI Code Mother v4.3 lets anonymous, remote attackers retrieve files outside the intended previ
Remote code execution in APScheduler (all versions through 3.10.x and 4.0.0a5) is achievable when applications deseriali
Same weakness CWE-427 – Uncontrolled Search Path Element
View allSame technique Privilege Escalation
View allShare
External POC / Exploit Code
Leaving vuln.today