Path Traversal Vulnerability in Gaudi Container Runtime Affects Intel Products

CVE-2026-32677

What is CVE-2026-32677?

The Gaudi Container Runtime prior to version 1.24.0 is susceptible to a path traversal vulnerability that could facilitate an escalation of privileges for unprivileged software adversaries. This vulnerability may be exploited by an authenticated user through a relatively simple attack, impacting the confidentiality, integrity, and availability of the affected system. The exploit can occur with local access, where specific internal knowledge is not necessarily required, but passive user interaction may be essential for successful exploitation. Mitigating this risk is crucial to safeguard system resources and protect sensitive data.

References