Description
Protection mechanism failure for some Intel(R) LLM Library for PyTorch within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires passive user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
Published: 2026-08-11
Score: 5.4 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The Intel(R) LLM Library for PyTorch contains a protection mechanism failure that allows unprivileged software to elevate its privileges when running in Ring 3. An adversary using a low‑complexity attack can exploit this flaw through local access; the description indicates the attack does not require special internal knowledge and only passive user interaction is needed. If successful, the attacker could gain higher privilege level, compromising confidentiality, integrity, and availability of the system.

Affected Systems

The vulnerability affects applications that rely on the Intel LLM Library for PyTorch. Specific vendor and product details are limited, but any system running a version of this library that is not yet patched is susceptible. The description does not provide explicit version ranges, so all deployments of the library remain potentially impacted.

Risk and Exploitability

The CVSS score of 5.4 indicates a medium severity risk. The EPSS score is below 1 %, suggesting a low probability of exploitation as of the analysis time. The vulnerability is not listed in the CISA KEV catalog. Exploitation requires local access and a low‑complexity attack; it is likely that attackers would target systems where the library is used without additional hardening.

Generated by OpenCVE AI on August 12, 2026 at 21:18 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply the latest Intel security update for the LLM Library for PyTorch that addresses privilege escalation.
  • Configure system policies to limit execution of this library to privileged users only or run critical workloads in a segregated environment.
  • If a timely update is unavailable, consider disabling or isolating the affected library until a patch is released.
  • Continuously monitor system logs for unauthorized privilege escalation attempts and review application behaviors for abnormal activity.

Generated by OpenCVE AI on August 12, 2026 at 21:18 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 13 Aug 2026 11:00:00 +0000

Type Values Removed Values Added
First Time appeared Intel
Intel llm Library For Pytorch
Vendors & Products Intel
Intel llm Library For Pytorch

Wed, 12 Aug 2026 21:45:00 +0000

Type Values Removed Values Added
Title Privilege Escalation via Protection Mechanism Failure in Intel LLM Library for PyTorch

Tue, 11 Aug 2026 17:00:00 +0000

Type Values Removed Values Added
Description Protection mechanism failure for some Intel(R) LLM Library for PyTorch within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires passive user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
Weaknesses CWE-693
References
Metrics cvssV4_0

{'score': 5.4, 'vector': 'CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'}


Subscriptions

Intel Llm Library For Pytorch
cve-icon MITRE

Status: PUBLISHED

Assigner: intel

Published:

Updated: 2026-08-12T15:29:42.944Z

Reserved: 2026-01-13T04:00:20.789Z

Link: CVE-2026-21387

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-08-11T17:17:55.413

Modified: 2026-08-12T20:54:11.500

Link: CVE-2026-21387

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-13T10:40:29Z

Weaknesses
  • CWE-693

    Protection Mechanism Failure