Intel AI Reference Models Privilege Escalation Vulnerability (INTEL-SA-01432/CVE-2026-21400)

Intel AI Reference Models Software Advisory Vulnerability Summary Intel ID: INTEL-SA-01432 Vulnerability Category: Software Impact: Privilege Escalation Severity: Medium Initial Release Date: November 8, 2026 Last Revised Date: November 8, 2026 Abstract A potential security vulnerability exists in Intel AI Reference Models software that could lead to privilege escalation. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details CVE ID: CVE-2026-21400 Description: For certain software versions prior to v3.4.1 in Intel AI Reference Models software, privilege escalation may be permitted for user applications within Ring 3. An unauthenticated software attacker combined with a privileged user, using a low-complexity attack, may enable privilege escalation. This result may occur during local access when attack requirements exist and no special internal knowledge is required and passive user interaction is required. The potential vulnerability may affect system Confidentiality (High), Integrity (High), and Availability (High), resulting in subsequent system Confidentiality (None), Integrity (None), and Availability (None) impacts. CVSS Base Score: 5.4 Medium CVSS Vector: CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:P/VC:H/VH:H/VA:H/SC:N/S:N/SAN Affected Products Intel AI Reference Models software downloaded before September 26, 2025, version v3.4.1. Recommendations Intel recommends updating Intel AI Reference Models software to version v3.4.1 or later. Updates can be downloaded at: Acknowledgments Intel thanks S.Lakshmi Vignesh (@lakshmivignesh) and Shrinivasan S - @normie34 for reporting this issue. Intel and the broader technology industry follow a disclosure practice known as coordinated disclosure, where cybersecurity vulnerabilities are publicly disclosed only after mitigation measures are available. Revision History Version: 1.0 Date: November 8, 2026 Description: Initial release Legal Disclaimer Intel provides these materials "as is" without warranty of any kind, either express or implied. All product dates and specifications are based on current expectations and are subject to change without notice. Intel product descriptions may contain design defects or known errata, which may cause products to deviate from published specifications. Currently known errata are available on request. Products that have reached their final service update may no longer receive feature and security updates. For more information about support and products, see this help article. The features and benefits of Intel technologies depend on system configuration and may require enabled hardware, software, or service activation. Performance varies by system configuration. No product or component can be absolutely secure. Please contact your system manufacturer or retailer for more information or visit http://intel.com. Some results were estimated or simulated using internal Intel analysis, architecture simulation, or modeling and are provided to you for informational purposes. Any differences in system hardware, software, or configuration may affect your actual performance. © Intel Corporation. Intel, the Intel logo, and other Intel trademarks are trademarks of Intel Corporation or its subsidiaries in the U.S. and/or other countries. Other names and brands may be claimed as the property of others. Report Vulnerabilities If you have information about a security vulnerability or something that affects Intel-branded products or technologies, submit your report through the Intigriti platform, where you will find eligibility criteria and submission instructions. All vulnerability reports must be submitted through Intigriti. For questions unrelated to reporting security vulnerabilities, contact Intel PSIRT. For questions related to Intel's external network presence (Intel.com and related subdomains), contact Intel's external security research team. Need Product Support? If you have questions about the security features of Intel products, need technical support, or want product updates or patches, visit Support and Downloads.

Goal Reached Thanks to every supporter — we hit 100%!

Intel AI Reference Models Privilege Escalation Vulnerability (INTEL-SA-01432/CVE-2026-21400)