Privilege Escalation Vulnerability in BigDL by Intel
CVE-2026-20703

5.4MEDIUM

Key Information:

Vendor

Intel

Status
Vendor
CVE Published:
10 November 2026

What is CVE-2026-20703?

The identified vulnerability in BigDL prior to version 2.4.0 represents a significant protection mechanism failure. Unprivileged software adversaries, leveraging a privileged user environment, can exploit this flaw through a low-complexity attack. This scenario allows for an escalation of privilege, which may necessitate only local access. Attackers can potentially bypass security without specialized internal knowledge, requiring minimal passive interaction from users. As a consequence, this vulnerability poses risks to the confidentiality, integrity, and availability of the affected systems, which may lead to severe security implications.

Affected Version(s)

BigDL before version 2.4.0

References

CVSS V4

Score:
5.4
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.