An unauthenticated or low‑privileged adversary can supply a crafted path that resolves outside the intended container directory, allowing the adversary to read or write arbitrary files on the host. This path traversal flaw, a classic CWE‑22 weakness, can be exploited by a local user with limited privileges, resulting in escalation of privilege and allowing complete compromise of confidentiality, integrity, and availability of the system. The flaw is present within user space (Ring 3) and hinges on insufficient path validation before resolving host file access.

Intel’s gaudi‑container‑runtime software versions before 1.24.0 are affected. The vulnerability is present in all releases where the runtime does not properly validate path components before resolving access to host files, and consequently systems running older versions of the container runtime should be considered vulnerable.

The CVSS score of 5.4 indicates a moderate severity threat, while the very low EPSS score (<1%) and absence from CISA KEV suggest current exploitation likelihood is minimal. However, the flaw still allows a privileged escalation if the conditions are met. Based on the description, the likely attack vector is local access from an authenticated user; no special internal knowledge is required beyond the default user context.