ZDI-CAN-29794
HIGH 7.8
Upcoming
Mar 24, 2026
TrendAI
TrendAI is a vendor in the artificial intelligence/machine learning security space. This is a high-severity local privilege escalation vulnerability (CVSS 7.8) that requires local access and low-level user authentication to exploit, with potential for complete compromise of confidentiality, integrity, and availability on the affected system. Security teams should monitor for exploitation attempts targeting TrendAI products in their environments and prepare patching procedures ahead of the July 2026 vendor deadline.
Advisory Details
Researcher
Lays (@_L4ys) of TRAPA Security
Reported
March 24, 2026
Deadline
July 22, 2026
97d
CVSS Vector
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H