Intel Transfer Learning Tool Privilege Escalation Vulnerability (CVE-2026-39452) Bulletin

Vulnerability Overview Intel ID: INTEL-SA-01499 Vulnerability Type: Software Impact: Privilege Escalation Severity: Medium Initial Release Date: August 11, 2026 Last Revised Date: August 11, 2026 Abstract: A potential security vulnerability exists in Intel® Transfer Learning Tool software that may lead to privilege escalation. Intel has not released updates to mitigate this vulnerability and has issued a Product End of Life (EOL) notification. Vulnerability Details: CVE ID: CVE-2026-39452 Description: For Intel® Transfer Learning Tool software versions prior to v0.7, user applications in Ring 3 may allow for privilege escalation. Unauthenticated software, combined with an unauthenticated user, may enable privilege escalation through a low-complexity attack. This outcome may occur via network access, where the required attack conditions are present and do not require special internal knowledge or user interaction. Potential impacts on system Confidentiality (Low), Integrity (Low), and Availability (Low) may occur, leading to no subsequent impact on system Confidentiality (None), Integrity (None), and Availability (None). CVSS Base Score: 6.3 Medium CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N Affected Products Affected Products: All versions of Intel® Transfer Learning Tool software. Mitigation Recommendation: Intel has issued a Product End of Life (EOL) notification for Intel® Transfer Learning Tool software. As of the date of this security advisory, Intel® Transfer Learning Tool software no longer receives additional features, security, or other updates. Intel recommends that users uninstall or discontinue use of Intel® Transfer Learning Tool software as soon as possible. Related Content: Product End of Life Notification for Intel® Transfer Learning Tool Software Credits Intel thanks Lakshmi Vignesh S for reporting this issue. Intel and the broader technology industry follow a disclosure practice known as coordinated disclosure, where cybersecurity vulnerabilities are publicly disclosed only after mitigation measures are provided. Revision History Revision: 1.0 Date: August 11, 2026 Description: Initial Release Legal Disclaimer Intel provides these materials “as is” with no warranties, either expressed or implied. All products, dates, and specifications are subject to change without notice. Intel products and described services may include design defects or errors known as errata, which may cause products to deviate from published specifications. Currently known errata are available upon request. Products reaching the End of Service Life may no longer receive feature or security updates. For more information on support and maintenance, please refer to this help article. The features and benefits of Intel technologies depend on system configuration and may require enabled hardware, software, or service activation. Performance varies by system configuration. No product or component can be absolutely secure. Contact your system manufacturer or retailer, or visit http://intel.com for more information. Some results have been estimated or simulated using internal Intel analysis, architecture simulation, or modeling, and are provided for informational purposes only. Any differences in your system, including hardware, software, or configuration, may affect your actual performance. © Intel Corporation. Intel, the Intel logo, and other Intel trademarks are trademarks of Intel Corporation or its subsidiaries in the U.S. and/or other countries. Other names and brands may be claimed as the property of others. Report a Vulnerability If you have information about a vulnerability affecting Intel branded products or technologies, please submit your report through the Integriti platform, where you can find qualification criteria and submission instructions. All vulnerability reports must be submitted through Integriti. For questions unrelated to reporting security vulnerabilities, please contact Intel PSIRT. For issues related to the presence of Intel external websites (intel.com and related subdomains), please contact the Intel External Security Research team. Need Product Support? If you have: Questions regarding Intel product security features Need technical support Want product updates or patches Please visit Support & Downloads. Footer Company Overview Contact Intel Newsroom Investors Careers Corporate Responsibility Inclusion Public Policy Intel Corporation Terms of Use Trademarks Cookie Policy Privacy Supply Chain Transparency Sitemap Recycling Intel is committed to respecting human rights and avoiding causing or contributing to adverse impacts on human rights. See more about this in the Intel Global Human Rights Guideline. Intel products and software are intended only to be used in applications that do not cause or contribute to adverse impacts on human rights.

Goal Reached Thanks to every supporter — we hit 100%!

Intel Transfer Learning Tool Privilege Escalation Vulnerability (CVE-2026-39452) Bulletin