Intel Connectivity Performance Suite LPE via Uncontrolled Search Path (CVE-2026-20772)

Vulnerability Overview Intel ID: INTEL-SA-01429 Vulnerability Category: Software Impact: Privilege Escalation Severity: Moderate Release Date: May 12, 2026 Last Revised: May 12, 2026 CVE Number: CVE-2026-20772 CVSS Score: 5.4 (Moderate) CVSS Vector: CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UIA:V/C:H/I:H/S:N/S:A:N Description: An unconstrained search path vulnerability exists in certain Intel® Connectivity Performance Suite software installers, which may lead to privilege escalation. This vulnerability may occur during local access, and attackers do not require special internal knowledge to exploit it. Affected Products Affected Products: Intel® Connectivity Performance Suite software, versions prior to 50.25.1121.193. Remediation Recommendation: Update Intel® Connectivity Performance Suite software to version 50.25.1121.193 or later. Download Link: https://www.intel.com/content/www/us/en/download/738623/ Acknowledgments Thanks to Sandro Poppi for reporting this issue. Revision History Version: 1.0 Date: May 12, 2026 Description: Initial release Legal Disclaimer Materials are provided "as is" without warranties of any kind, either express or implied. All products, dates, and specifications are subject to change without notice based on current expectations. Intel products may contain known design defects or errors known as errata, which may cause the product to deviate from published specifications. Products that have reached End of Servicing Updates may no longer receive feature or security updates. Features and benefits of Intel technologies depend on system configuration and may require enabled hardware, software, or service activation. Performance varies by system configuration, and no product or component can be absolutely secure. Some results are based on internal analysis or architectural simulations and are for informational purposes only. Actual performance may be affected by system hardware, software, or configuration. Report a Vulnerability To report information about security vulnerabilities, submit a report via the Intigriti platform. For non-security vulnerability issues, contact Intel PSIRT. For issues related to external Intel websites, contact Intel’s External Security Research Team. Need Product Support? For questions about Intel product security features, technical support, product updates, or patches, visit Support & Downloads.

Goal Reached Thanks to every supporter — we hit 100%!

Intel Connectivity Performance Suite LPE via Uncontrolled Search Path (CVE-2026-20772)