CVE-2026-20799

Awaiting Analysis Awaiting Analysis - Queue

Battery Life Diagnostic Tool Privilege Escalation

Publication date: 2026-08-11

Last updated on: 2026-08-12

Assigner: Intel Corporation

Description

Untrusted search path for some Battery Life Diagnostic Tool software before version 2.9.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present with special internal knowledge and requires passive user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-11

Last Modified

2026-08-12

Generated

2026-09-01

AI Q&A

2026-08-11

EPSS Evaluated

2026-08-30

NVD

CVE-2026-20799

EUVD

EUVD-2026-56503

Affected Vendors & Products

Vendor	Product	Version / Range
intel	battery_life_diagnostic_tool	to 2.9.0 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-426	The product searches for critical resources using an externally-supplied search path that can point to resources that are not under the product's direct control.

Attack-Flow Graph

Executive Summary

This vulnerability involves an untrusted search path in the Battery Life Diagnostic Tool software before version 2.9.0. An attacker with authenticated user access and special internal knowledge could exploit it to escalate privileges locally. The attack requires high complexity and passive user interaction.

Detection Guidance

This vulnerability requires specific conditions to exploit, including local access, authenticated user, and passive user interaction. Detection may involve checking the installed version of the Battery Life Diagnostic Tool software. If the version is below 2.9.0, the system is vulnerable. No specific commands are provided in the context to detect this issue.

Impact Analysis

An attacker could gain elevated privileges on your system, potentially accessing sensitive data or altering system settings. This may lead to loss of confidentiality, integrity, and availability of your system and data.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating GDPR and HIPAA requirements for data protection and confidentiality. Non-compliance may result in legal penalties and reputational damage.

Mitigation Strategies

Update the Battery Life Diagnostic Tool software to version 2.9.0 or later to address the untrusted search path vulnerability.

Hi! I’m here to help you understand CVE-2026-20799. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70