Escalation of Privilege Vulnerability in BigDL Software by Intel
CVE-2026-56440

4.6MEDIUM

Key Information:

Vendor

Intel

Status
Vendor
CVE Published:
10 November 2026

What is CVE-2026-56440?

An improper input validation vulnerability in Intel's BigDL versions prior to 2.5.0b1 could potentially allow an unprivileged software adversary to escalate user privileges. The exploitation of this flaw may occur through local access by an unauthenticated user, requiring minimal attack complexity and user interaction. This vulnerability raises concerns regarding the confidentiality, integrity, and availability of the affected system, potentially leading to impacts that affect system settings without the need for extensive internal knowledge.

Affected Version(s)

BigDL before version 2.5.0b1

References

CVSS V4

Score:
4.6
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.