Intel oneCCL Bindings for PyTorch Privilege Escalation Vulnerability (CVE-2026-24693) Advisory

Vulnerability Overview Vulnerability Name: Intel® oneCCL Bindings for PyTorch Software Advisory CVE ID: CVE-2026-24693 Vulnerability Description: A privilege escalation vulnerability may exist in certain versions of Intel® oneCCL Bindings for PyTorch software (prior to version v2.8.0) when running in Ring 3. An unauthorized attacker with local access could leverage a low-complexity attack to achieve privilege escalation. This vulnerability can be triggered via local access without requiring special internal knowledge or passive user interaction. Potential impacts include System Confidentiality (None), Integrity (High), and Availability (High). CVSS Base Score: 5.4 Medium CVSS Vector: CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N Scope of Impact Affected Products: All versions of Intel® oneCCL Bindings for PyTorch software Remediation Recommended Actions: Intel has issued an End-of-Support Notice for the product, advising users to uninstall or cease using Intel® oneCCL Bindings for PyTorch software. Related Resources: End-of-Support Notice Additional Information Release Date: August 11, 2026 Last Revised: August 11, 2026 Acknowledgments: Thanks to Lakshmi Vignesh S and Shrinivasan Sekar for reporting this issue. Legal Notice and Disclaimer Intel provides these materials "as is" without any express or implied warranties. All products, dates, and specifications are subject to change based on current expectations. Intel products and described services may contain design flaws or errors known as errata, which may cause products to deviate from published specifications. Products that have reached the end of service updates may no longer receive functional or security updates. Features and advantages of Intel technologies depend on system configuration and may require enabled hardware, software, or service activation. Performance varies depending on system configuration; no product or component can be guaranteed to be absolutely secure. Some results may be estimated or simulated through internal Intel analysis, architecture simulations, or modeling, provided for reference only. System hardware, software, or configuration may affect actual performance. Intel, the Intel logo, and other Intel trademarks are trademarks of Intel Corporation or its subsidiaries. Reporting Vulnerabilities If you have vulnerability information regarding Intel-branded products or technologies, you can submit a report through the Integrity platform. For non-security-related issues, contact Intel PSIRT. For issues related to external websites, contact Intel's External Security Research team. Need Product Support? For questions regarding Intel product security features, technical support, or updates, please visit Support and Downloads. Footer Information Links for Company Overview, Contact Intel, Newsroom, Investors, Careers, Corporate Responsibility, Inclusivity, Public Policy, etc. Social Media Links: Facebook, X, LinkedIn, YouTube, Instagram. Copyright Information: © Intel Corporation, All Rights Reserved.

Goal Reached Thanks to every supporter — we hit 100%!

Intel oneCCL Bindings for PyTorch Privilege Escalation Vulnerability (CVE-2026-24693) Advisory