Intel LLM Library for PyTorch Privilege Escalation Vulnerability (CVE-2026-21387) Advisory

Vulnerability Overview Vulnerability Name: Intel® LLM Library for PyTorch Software Advisory CVE ID: CVE-2026-21387 Description: A security vulnerability in the Intel® LLM Library for PyTorch software may lead to privilege escalation. The vulnerability occurs in user-mode applications at Ring 3. Attackers can exploit this vulnerability using a low-complexity attack vector without requiring special internal knowledge or passive user interaction. Potential impacts include high Confidentiality, and No Impact on Integrity and Availability. CVSS Base Score: 5.4 Medium CVSS Vector: CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:R/VC:H/VI:H/VA:H/SC:N/S:N/S:A:N Affected Products Affected Products: All versions of Intel® LLM Library for PyTorch software. Remediation Recommended Actions: Intel has issued a product termination notice, advising users to uninstall or cease using the Intel® LLM Library for PyTorch software as soon as possible. Related Links: Product Termination Notice Additional Information Release Date: August 11, 2026 Last Updated: August 11, 2026 Acknowledgments: Intel thanks Lakshmi Vignesh S for reporting this issue. Legal Notice and Disclaimer Materials provided by Intel are provided "as is" without warranty of any kind, whether express or implied. All products, dates, and specifications are subject to change without notice. Intel products and services may contain known design flaws or errors known as errata which may cause the product to deviate from published specifications. Products that have reached the end of service updates may no longer receive feature or security updates. Intel technologies’ performance and functionality depend on system configuration, and may require enabled hardware, software, or service activation. Performance varies by system configuration; no product or component can be absolutely secure. Certain results are estimates or simulations made by internal Intel analysis or architectural simulation/modeling and are provided for informational purposes only. Differences in system hardware, software, or configuration may affect actual performance. Intel trademarks and names are owned by Intel Corporation or its subsidiaries. Reporting a Vulnerability If you have information regarding a security issue or vulnerability related to Intel branded products or technologies, please submit a report through the Integriti platform. For reports of security vulnerabilities, contact Intel PSIRT. For issues related to external Intel websites (intel.com and related subdomains), contact the Intel External Security Research team. Need Product Support? If you have questions about the security features of Intel products, require technical support, or wish to obtain product updates/patches, visit Support and Downloads. --- End of Summary

Goal Reached Thanks to every supporter — we hit 100%!

Intel LLM Library for PyTorch Privilege Escalation Vulnerability (CVE-2026-21387) Advisory