Llm On Ray
Monthly
Privilege escalation in Intel's LLM-on-Ray framework before version 1.0 stems from a protection mechanism failure (CWE-693) within Ring 3 user-space components, allowing an attacker with high-privileged user access to escalate privileges on the local system. The attack requires local access, passive user interaction from a privileged user, and specific attack requirements (AT:P), but results in high confidentiality, integrity, and availability impact on the vulnerable system with no subsequent system scope change. No public exploit code has been identified at time of analysis, and it is not listed in the CISA KEV catalog.
Privilege escalation in Intel's LLM-on-Ray framework before version 1.0 stems from a protection mechanism failure (CWE-693) within Ring 3 user-space components, allowing an attacker with high-privileged user access to escalate privileges on the local system. The attack requires local access, passive user interaction from a privileged user, and specific attack requirements (AT:P), but results in high confidentiality, integrity, and availability impact on the vulnerable system with no subsequent system scope change. No public exploit code has been identified at time of analysis, and it is not listed in the CISA KEV catalog.