CVE-2026-21400: Medium severity vulnerability
Protection mechanism failure for some Intel(R) AI Reference Models before version v3.4.1 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires passive user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Intel(R) AI Reference Modelsto a version that resolves this vulnerability.Fixed in v3.4.1 - Compensating control
Mitigate local privilege-escalation risk by restricting unprivileged users’ ability to interact with or run the affected Ring 3 user applications (limit local access to trusted/authorized users and processes).
Event History
Frequently Asked Questions
What is the severity of CVE-2026-21400?
The severity of CVE-2026-21400 is rated as risk 46.
How do I fix CVE-2026-21400?
To fix CVE-2026-21400, update to Intel AI Reference Models version v3.4.1 or later.
What kind of vulnerabilities does CVE-2026-21400 exploit?
CVE-2026-21400 exploits a protection mechanism failure, allowing potential escalation of privilege.
Who is affected by CVE-2026-21400?
CVE-2026-21400 affects users of Intel AI Reference Models versions prior to v3.4.1.
What type of attack does CVE-2026-21400 allow?
CVE-2026-21400 allows an escalation of privilege through a combination of unprivileged software adversary and a privileged user.