The vulnerability is a protection mechanism failure in LLM‑on‑Ray before version 1.0 that allows an unprivileged application running in user mode to acquire the privileges of a privileged user. An attacker can exploit this local flaw with low complexity and only passive user interaction, potentially reading, modifying or deleting sensitive data and disrupting operations, thereby causing high confidentiality, integrity and availability impacts.

Deployments of LLM‑on‑Ray with versions earlier than 1.0 are affected. The product appears to be a specialized or internal solution, and no public patch or detailed advisory has been released beyond the Intel reference.

The CVSS score of 5.4 indicates moderate severity. The EPSS score of less than 1% suggests a very low probability of exploitation. The vulnerability is not listed in the CISA KEV catalog. Although it requires local access and low complexity, the potential for catastrophic confidentiality, integrity and availability damage warrants a careful assessment of the environment.