EUVD-2026-56488
GHSA-w335-vfh3-52g2
Severity by source
CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Local vector with high privilege requirement and user interaction; AC:H reflects CVSS 4.0 AT:P (specific attack conditions required); no scope change as subsequent system impacts are N.
Primary rating from Vendor (intel).
CVSS VectorVendor: intel
Lifecycle Timeline
1DescriptionCVE.org
Protection mechanism failure for some LLM Scaler software within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires passive user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
AnalysisAI
Privilege escalation in Intel's LLM Scaler software exposes systems to full compromise of confidentiality, integrity, and availability within the affected host. The flaw stems from a protection mechanism failure (CWE-693) operating in Ring 3 (user-space applications), where an unprivileged software component can leverage a co-present privileged user session to bypass access controls and elevate privileges. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog; however, the high impact triad (C:H/I:H/A:H) warrants prompt patching on any system running Intel's LLM Scaler where privileged users operate.
Technical ContextAI
Intel's LLM Scaler software is an AI/ML workload acceleration layer designed to optimize large language model inference and scaling operations on Intel hardware. The affected component operates in Ring 3 (the least privileged CPU protection ring, reserved for user-space applications), where insufficient enforcement of a protection mechanism (CWE-693 - Protection Mechanism Failure) allows privilege boundaries to be circumvented. CWE-693 broadly covers failures in security controls that are intended to prevent unauthorized access or actions; in this context, the protection mechanism that should restrict unprivileged software from gaining elevated rights is not functioning correctly. The CPE identifier cpe:2.3:a:n/a:llm_scaler_software:*:*:*:*:*:*:*:* covers all versions of the software without a vendor-specific namespace, indicating the vulnerability may span the full product release history. The attack is constrained to local access (AV:L) and requires specific attack conditions to be present (AT:P in CVSS 4.0), suggesting a scenario-dependent exploitation path rather than a universally triggerable flaw.
RemediationAI
The primary remediation is to apply the patch or updated version identified in Intel Security Advisory Intel-SA-01466, available at https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01466.html. Exact fixed version numbers are not independently confirmed from the data provided - consult the advisory for the specific build to upgrade to. While awaiting patching, reduce exposure by ensuring LLM Scaler software is not run in environments where untrusted or low-privilege code executes concurrently with privileged user sessions; separating AI inference workloads from interactive privileged sessions via dedicated service accounts or containerization can reduce the attacker's ability to satisfy the co-presence requirement. Restricting local login access to only necessary personnel on systems running LLM Scaler limits the pool of potential unprivileged software adversaries. These workarounds do not eliminate the vulnerability but raise the bar for exploitation given the AT:P and UI:P constraints in the CVSS vector.
LibreNMS before 24.10.0 allows a remote attacker to execute arbitrary code via OS command injection involving AboutContr
Reachable assertion in Open5GS up to version 2.7.6 allows remote unauthenticated attackers to crash the Diameter CER han
A Command Injection issue in the payload build page in BYOB (Build Your Own Botnet) 2.0 allows attackers to execute arbi
Denial of service in Open5GS 2.7.6 and earlier allows network-adjacent attackers with low-privilege Diameter Gx peer acc
Denial of service in Open5GS HSS (Home Subscriber Server) versions 2.7.0 through 2.7.6 is triggered remotely by manipula
Remote command injection in Control Web Panel allows unauthenticated attackers to execute arbitrary OS commands as root
LINQPad before 5.52.01 Pro edition is vulnerable to Unsafe Deserialization in LINQPad.AutoRefManager::PopulateFromCache(
Remote code execution in dash-uploader (Python package for Plotly Dash) versions 0.1.0 through 0.7.0a2 allows unauthenti
Command injection in LiteLLM 1.18.10 lets attackers who can configure MCP (Model Context Protocol) servers supply arbitr
SQL injection in AzuraCast's backup restore flow (versions up to and including 0.23.7) lets an attacker achieve privileg
Arbitrary file read in Yu AI Code Mother v4.3 lets anonymous, remote attackers retrieve files outside the intended previ
Remote code execution in APScheduler (all versions through 3.10.x and 4.0.0a5) is achievable when applications deseriali
Same weakness CWE-693 – Protection Mechanism Failure
View allSame technique Privilege Escalation
View allShare
External POC / Exploit Code
Leaving vuln.today