Executive brief
Intel Battery Life Diagnostic Tool is a system utility used to monitor and analyze battery performance on computers. An untrusted search path vulnerability in versions before 2.9.0 could allow an authenticated local user to escalate their privileges, potentially gaining full control over the system and accessing or modifying sensitive data.
Technical details
This is a privilege escalation vulnerability stemming from an untrusted search path in Intel Battery Life Diagnostic Tool versions before 2.9.0. The vulnerability exists in Ring 3 user applications and can be exploited by an unprivileged, authenticated user via local access with high complexity and passive user interaction. An attacker could manipulate the search path to execute malicious code with elevated privileges. The vulnerability impacts system confidentiality, integrity, and availability. Intel has released version 2.9.0 with mitigations available for download.
Affected products
- Intel Battery Life Diagnostic Tool before 2.9.0
Timeline
- 2026-08-11: disclosed