CVE-2024-21799

HIGH

Intel(R) Extension for Transformers <1.5 - Privilege Escalation

Title source: llm
STIX 2.1

Description

Path traversal for some Intel(R) Extension for Transformers software before version 1.5 may allow an authenticated user to potentially enable escalation of privilege via local access.

References (1)

Core 1

Scores

CVSS v3 7.1
EPSS 0.0075
EPSS Percentile 50.0%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-22
Status published
Products (1)
n/a/Intel(R) Extension for Transformers software before version 1.5
Published Nov 13, 2024
Tracked Since Feb 18, 2026