Intel LLM-on-Ray Privilege Escalation Vulnerability (CVE-2026-28707) Advisory

Vulnerability Overview Vulnerability Name: LLM-on-Ray Software Advisory Intel ID: INTEL-SA-01493 Vulnerability Category: Software Impact: Privilege Escalation Severity: Medium First Published: August 11, 2026 Last Revised: August 11, 2026 Detailed Description: A potential security vulnerability in the LLM-on-Ray software could lead to privilege escalation. Intel has not released an update to mitigate this vulnerability and has issued a product end-of-support notice. Scope Affected Products: All versions of LLM-on-Ray software CVE ID: CVE-2026-28707 CVSS Base Score: 5.4 Medium CVSS Vector: CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:P/VC:H/VH:H/VA:H/SC:N/S:N/S:A:N Remediation Recommendation: Intel has issued a product end-of-support notice; users are advised to uninstall or stop using the LLM-on-Ray software. Related Resources: Product End-of-Support Notice Additional Information Acknowledgments: Thanks to Lakshmi Vignesh S for reporting this issue. Disclosure Practice: Intel follows coordinated disclosure practices, meaning cybersecurity vulnerabilities are publicly disclosed only after mitigation measures are provided. Revision History Version: 1.0 Date: August 11, 2026 Description: Initial release Legal Disclaimer The materials provided by Intel are provided "as is" without any express or implied warranties. All products, dates, and specifications are based on current expectations and may change without notice. Intel products may contain known design flaws or errors, referred to as errata, which may cause products to deviate from published specifications. Products that have reached end of service updates may no longer receive feature or security updates. The characteristics and advantages of Intel technologies depend on system configuration and may require hardware, software, or service activation. Performance varies by system configuration, and no product or component is absolutely secure. Some results are estimated or simulated using internal Intel analysis or architectural simulation/modeling and are for reference only. Intel trademarks and names belong to Intel Corporation or its subsidiaries. Reporting Vulnerabilities If you have a security vulnerability report, please submit it via the Intigriti platform. For non-security-related questions, contact Intel PSIRT. For issues related to external Intel websites, contact the Intel External Security Research Team. Need Product Support? For questions regarding Intel product security features, please visit the Support Page. For technical support or product updates/patches, please visit the Support Page.

Goal Reached Thanks to every supporter — we hit 100%!

Intel LLM-on-Ray Privilege Escalation Vulnerability (CVE-2026-28707) Advisory