Privilege Escalation Vulnerability in Intel AI for Enterprise Software
CVE-2025-24923

5.4MEDIUM

Key Information:

Vendor

Intel
Status
Intel(r) Ai For Enterprise Retrieval-augmented Generation Software
Vendor
CVE Published:
12 August 2025

What is CVE-2025-24923?

A vulnerability exists in Intel's AI for Enterprise Retrieval-augmented Generation software that allows authenticated users to exploit an uncontrolled search path. This flaw could enable the escalation of privileges through local access, potentially compromising system security and integrity. Users of affected versions should review the security advisory and take appropriate measures to mitigate risks associated with this vulnerability.

Affected Version(s)

Intel(R) AI for Enterprise Retrieval-augmented Generation software See references

References

https://intel.com/content/www/us/en/security-center/advis...

CVSS V4

Score:
5.4
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-24923 : Privilege Escalation Vulnerability in Intel AI for Enterprise Software