CVE-2026-24693

Awaiting Analysis Awaiting Analysis - Queue

Protection Mechanism Failure in Intel oneCCL Bindings for PyTorch

Publication date: 2026-08-11

Last updated on: 2026-08-12

Assigner: Intel Corporation

Description

Protection mechanism failure for some Intel(R) oneCCL Bindings for PyTorch before version v2.8.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires passive user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-11

Last Modified

2026-08-12

Generated

2026-09-01

AI Q&A

2026-08-11

EPSS Evaluated

2026-08-30

NVD

CVE-2026-24693

EUVD

EUVD-2026-56519

Affected Vendors & Products

Vendor	Product	Version / Range
intel	oneccl_bindings_for_pytorch	to 2.8.0 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-693	The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.

Attack-Flow Graph

Executive Summary

This is a privilege escalation vulnerability in Intel(R) oneCCL Bindings for PyTorch before v2.2.8.0. It allows unprivileged software to gain higher privileges when combined with a privileged user. The attack requires local access, low complexity, and passive user interaction but no special internal knowledge.

Detection Guidance

Detection of this vulnerability requires checking the version of Intel oneCCL Bindings for PyTorch. If the version is before v2.8.0, the system is potentially vulnerable. Use commands like 'pip show oneccl_bindings_for_pytorch' or 'conda list oneccl_bindings_for_pytorch' to verify the installed version.

Impact Analysis

An attacker could exploit this to gain elevated privileges on your system, potentially leading to unauthorized access, data theft, or system manipulation. The impact includes high confidentiality, integrity, and availability risks for the vulnerable system.

Compliance Impact

The vulnerability may impact confidentiality, integrity, and availability of systems, which could lead to unauthorized access or data breaches. This could potentially violate compliance requirements under GDPR (data protection) or HIPAA (healthcare data security) if sensitive data is exposed or altered.

Mitigation Strategies

Update Intel oneCCL Bindings for PyTorch to version v2.8.0 or later to address the protection mechanism failure.

Hi! I’m here to help you understand CVE-2026-24693. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70