{"id":"CVE-2026-40065","kind":"vulnerability","aliases":["CVE-2026-40065"],"related":[],"title":"Intel Neural Compressor: input validation flaw allows local privilege escalation","description":"Improper input validation for some Intel(R) Neural Compressor software before version v3.7 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires passive user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.","summary":"Intel Neural Compressor before v3.7 has an input validation flaw that lets an unprivileged local user escalate privileges. An attacker with local access can gain higher system rights, which could expose or change data on the machine.","severity":"medium","cvss":5.4,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["intel-neural-compressor","local-access","package","python"],"not_affected_if":["no-local-untrusted-users","version-3.7-or-later"],"how_to_check":"- Check the installed Intel Neural Compressor version (for example `pip show neural-compressor`) and compare it with the fixed version.","fix":"- Intel Neural Compressor: move to `v3.7` or later.","status":"open","published_at":"2026-11-10T17:17:42+00:00","first_seen_at":"2026-11-10T17:22:43+00:00","triaged_at":"2026-11-10T17:24:28+00:00","updated_at":"2026-11-10T17:24:28+00:00","category":"package","confidence":0.6,"triage":{"at":"2026-11-10T17:24:28Z","model":"claude-haiku-5-5","output":{"fix":"- Intel Neural Compressor: move to `v3.7` or later.","reach":"local","title":"Intel Neural Compressor: input validation flaw allows local privilege escalation","impact":"high","summary":"Intel Neural Compressor before v3.7 has an input validation flaw that lets an unprivileged local user escalate privileges. An attacker with local access can gain higher system rights, which could expose or change data on the machine.","audience":"developers","category":"package","nicknames":[],"who_cares":["intel-neural-compressor","python","local-access"],"confidence":0.6,"fix_status":"available","needs_auth":"yes","worst_case":"local user gains elevated privileges on the system","analyst_note":"","how_to_check":"- Check the installed Intel Neural Compressor version (for example `pip show neural-compressor`) and compare it with the fixed version.\n- unknown for other checks; the sources do not say.","plain_action":"","product_name":"","needs_analyst":false,"not_affected_if":["version-3.7-or-later","no-local-untrusted-users"],"who_is_affected":"Systems where Intel Neural Compressor before v3.7 is installed and local users without privileges can run code. The sources do not describe a remote or default-config trigger, so machines without local untrusted users are lower risk.","user_interaction":"yes","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000712,"input_tokens":4654,"output_tokens":494,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':12A,15A '-40065':13A,16A '3':78C 'access':23B,48B,112C 'adversari':89C 'allow':7A,82C 'applic':80C 'attack':45B,99C,114C 'avail':138C,153C 'chang':58B 'combin':94C 'complex':98C 'compressor':3A,20B,28B,71C 'confidenti':133C,148C 'could':55B 'cve':11A,14A 'data':59B 'enabl':101C 'escal':10A,42B,84C,102C 'expos':56B 'flaw':6A,35B 'gain':50B 'high':134C,136C,139C 'higher':51B 'impact':131C,155C 'improp':63C 'input':4A,33B,64C 'integr':135C,150C 'intel':1A,18B,26B,68C 'intel-neural-compressor':17B 'interact':126C 'intern':120C 'knowledg':121C 'let':37B 'local':8A,22B,40B,47B,111C 'local-access':21B 'low':97C 'machin':62B 'may':81C,100C,107C,130C 'neural':2A,19B,27B,70C 'none':149C,151C,154C 'occur':109C 'packag':24B 'passiv':124C 'potenti':108C,128C 'present':117C 'privileg':9A,43B,86C,92C,104C 'python':25B 'r':69C 'requir':115C,123C 'result':106C,144C 'right':53B 'ring':77C 'softwar':72C,88C 'special':119C 'subsequ':146C 'system':52B,143C,147C 'unprivileg':39B,87C 'user':41B,79C,93C,125C 'v3.7':30B,75C 'valid':5A,34B,65C 'version':74C 'via':110C 'vulner':129C,142C 'within':76C 'without':118C","nicknames":[],"mitigations":[],"who_affected":"Systems where Intel Neural Compressor before v3.7 is installed and local users without privileges can run code. The sources do not describe a remote or default-config trigger, so machines without local untrusted users are lower risk.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"developers","plain_action":null,"pkeys":[],"ptokens":[],"labels":["intelneuralcompressor","localaccess","medium","package","python"],"campaign_type":null,"search_a":"'-2026':12A,15A '-40065':13A,16A 'allow':7A 'compressor':3A 'cve':11A,14A 'escal':10A 'flaw':6A 'input':4A 'intel':1A 'local':8A 'neural':2A 'privileg':9A 'valid':5A","search_b":"'access':23B,48B 'attack':45B 'chang':58B 'compressor':20B,28B 'could':55B 'data':59B 'escal':42B 'expos':56B 'flaw':35B 'gain':50B 'higher':51B 'input':33B 'intel':18B,26B 'intel-neural-compressor':17B 'let':37B 'local':22B,40B,47B 'local-access':21B 'machin':62B 'neural':19B,27B 'packag':24B 'privileg':43B 'python':25B 'right':53B 'system':52B 'unprivileg':39B 'user':41B 'v3.7':30B 'valid':34B","search_c":"'3':78C 'access':112C 'adversari':89C 'allow':82C 'applic':80C 'attack':99C,114C 'avail':138C,153C 'combin':94C 'complex':98C 'compressor':71C 'confidenti':133C,148C 'enabl':101C 'escal':84C,102C 'high':134C,136C,139C 'impact':131C,155C 'improp':63C 'input':64C 'integr':135C,150C 'intel':68C 'interact':126C 'intern':120C 'knowledg':121C 'local':111C 'low':97C 'may':81C,100C,107C,130C 'neural':70C 'none':149C,151C,154C 'occur':109C 'passiv':124C 'potenti':108C,128C 'present':117C 'privileg':86C,92C,104C 'r':69C 'requir':115C,123C 'result':106C,144C 'ring':77C 'softwar':72C,88C 'special':119C 'subsequ':146C 'system':143C,147C 'unprivileg':87C 'user':79C,93C,125C 'v3.7':75C 'valid':65C 'version':74C 'via':110C 'vulner':129C,142C 'within':76C 'without':118C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T17:17:42+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"secure@intel.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-40065","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-40065","severity":null,"published_at":"2026-11-10T17:17:42+00:00","modified_at":"2026-11-10T17:17:42+00:00","first_seen_at":"2026-11-10T17:22:43+00:00","fetched_at":"2026-11-10T17:22:43+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}