Privilege Escalation Vulnerability in Intel Neural Compressor Software

CVE-2026-40704

What is CVE-2026-40704?

The Intel Neural Compressor software contains a vulnerability in its protection mechanisms that may allow an unprivileged adversary to escalate privileges under specific conditions. For an attacker to exploit this weakness, they must have local access to the vulnerable system, and they need to be able to combine access with low complexity methods. This issue highlights the potential risks associated with insufficient protections in user applications, casting a shadow on the confidentiality, integrity, and availability of the affected systems. Passive user interaction is required for this vulnerability to manifest, necessitating awareness and precaution from users and system administrators alike.

References