Escalation of Privilege in Intel Neural Compressor Software

CVE-2025-27712

What is CVE-2025-27712?

The Intel Neural Compressor software prior to version v3.4 contains an escalation of privilege vulnerability that could be exploited by unprivileged adversaries authenticated to the system. This flaw may allow unauthorized users to gain elevated access privileges, potentially affecting system confidentiality, integrity, and availability. Exploitation of this vulnerability may demand local access, active user interaction, and specific knowledge about the internal workings of the application, making it less likely to be exploited without targeted effort. Organizations using affected versions should consider updating to mitigate the risk.

References