Executive brief
Intel AI Containers, a software platform for deploying AI applications, contains a protection mechanism failure that allows local privilege escalation. An attacker with a privileged user account could exploit this vulnerability to escalate their privileges further, potentially compromising system confidentiality, integrity, and availability. Intel has discontinued support for this product and recommends users uninstall it immediately.
Technical details
The vulnerability is a protection mechanism failure in Intel AI Containers before version v0.4.0 within Ring 3 (user-mode applications), leading to privilege escalation. The attack requires local access, high privileges (PR:H), and passive user interaction (UI:P), with low attack complexity (AC:L). An attacker with system software adversary status and a privileged user account can exploit this to gain further privilege escalation. Intel has issued a Product Discontinuation Notice and is not releasing patches; users are advised to uninstall the product.
Affected products
- Intel AI Containers before v0.4.0
Timeline
- 2026-08-11: disclosed