Deserialization Vulnerability in BigDL Software by Intel

CVE-2026-52899

What is CVE-2026-52899?

The BigDL software prior to version 2.5.0b1 has a vulnerability that allows deserialization of untrusted data. An attacker could exploit this weakness to escalate privileges without user interaction, particularly through a network. This kind of attack has minimal complexity requirements and could potentially impact the confidentiality, integrity, and availability of the affected system. Successful exploitation may allow unauthorized access to system resources, further compromising system security.

References