Intel Gaudi Container Runtime Privilege Escalation Vulnerability Advisory

Vulnerability Overview Vulnerability ID: INTEL-SA-01489 Vulnerability Category: Software Impact: Privilege Escalation Severity: Medium Initial Release: August 11, 2026 Last Revised: August 11, 2026 Summary: A potential security vulnerability in Gaudi Container Runtime software may lead to privilege escalation. Intel is releasing software updates to mitigate this vulnerability. Vulnerability Details: CVE ID: CVE-2026-32677 Description: A path traversal vulnerability exists in Gaudi Container Runtime prior to version 1.24.0 within user-space applications at Ring 3 level, which may lead to privilege escalation. An unauthenticated attacker with low attack complexity may achieve privilege escalation. This vulnerability may occur during local access and requires passive user interaction when an attack requirement exists and no specialized internal knowledge is needed. The potential vulnerability may impact Confidentiality (High), Integrity (High), and Availability (High), resulting in no subsequent impact on System Confidentiality, System Integrity, or System Availability. CVSS Base Score: 5.4 Medium CVSS Vector: CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:R/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N Affected Products Affected Product: Gaudi Container Runtime versions prior to 1.24.0 Remediation Recommendation: Intel recommends updating the Gaudi Container Runtime software to version 1.24.0 or later. Update Download: Updates can be downloaded from the following location: Acknowledgments Intel thanks the DEVCore research team from Xiaobyei (@xiaobye_tw) for reporting this issue. Revision History Revision: 1.0 Date: August 11, 2026 Description: Initial Release Legal Disclaimer Intel provides the materials provided "as is" with no warranties, either expressed or implied. All products, dates, and specifications are based on current expectations and are subject to change at any time. Intel products and descriptions may contain known design defects or errors, which may cause the products to deviate from published specifications. Currently known errors are available upon request. Intel products may no longer receive feature or security updates after their service update end date. For more details on support and maintenance, please refer to the help articles. The functionality and benefits of Intel technologies depend on system configuration and may require hardware, software, or service activation. Performance varies by system configuration. No product or component can be absolutely secure. Check with your system manufacturer or retailer, or visit http://intel.com for more information. Some results were estimated or simulated using internal Intel analysis or architectural simulation or modeling and are provided for informational purposes only. Differences in your system’s hardware, software, or configuration may affect your actual performance. © Intel Corporation. Intel, the Intel logo, and other Intel trademarks are trademarks of Intel Corporation or its subsidiaries in the U.S. and/or other countries. Other names and brands may be claimed as the property of their respective owners. Report a Vulnerability If you have information about security issues or vulnerabilities that affect Intel-branded products or technologies, please submit your report via the Integriti platform, where you can find eligibility criteria and submission instructions. All vulnerability reports must be submitted through Integriti. For issues unrelated to reporting security vulnerabilities, please contact Intel PSIRT. For issues related to Intel’s external network (intel.com and related subdomains), please contact Intel’s External Security Research team. Need Product Support? If you have the following questions: Questions regarding security features of Intel products Need technical support Want product updates or patches Please visit the Support and Downloads page.

Goal Reached Thanks to every supporter — we hit 100%!

Intel Gaudi Container Runtime Privilege Escalation Vulnerability Advisory