Missing Authentication Vulnerability in Ring 3 AI Playground Software by Intel
CVE-2026-35060

2LOW

Key Information:

Vendor

Intel

Vendor
CVE Published:
10 November 2026

What is CVE-2026-35060?

The AI Playground software from Intel exposes a critical vulnerability due to missing authentication for essential functions, allowing unauthorized users to escalate privileges. A low complexity attack can exploit this vulnerability with authenticated access, potentially compromising the system without requiring user interaction. While the impacts on confidentiality and integrity are minimal, local access could allow further exploit opportunities, making it imperative for users to update to affected versions.

Affected Version(s)

AI Playground software before version v3.1.1-beta

References

CVSS V4

Score:
2
Severity:
LOW
Confidentiality:
Low
Integrity:
Low
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.