Privilege Escalation Vulnerability in Intel Neural Compressor Software
CVE-2026-40065

5.4MEDIUM

Key Information:

Vendor

Intel

Vendor
CVE Published:
10 November 2026

What is CVE-2026-40065?

The Intel Neural Compressor software prior to version 3.7 contains a vulnerability due to improper input validation that may lead to privilege escalation. This weakness allows unprivileged users to access privileged functions on the affected system, which could be exploited through local access under certain low-complexity attack scenarios. Affected users need to be passive participants for the exploit to succeed, suggesting a potential risk if proper security measures are not in place. This vulnerability can critically compromise the integrity, confidentiality, and availability of the affected systems.

Affected Version(s)

Intel(R) Neural Compressor software before version v3.7

References

CVSS V4

Score:
5.4
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.