CVE-2026-32788
Received Received - Intake

Uncontrolled Search Path in Approximate Bayesian Inference Framework

Vulnerability report for CVE-2026-32788, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-08-11

Last updated on: 2026-08-11

Assigner: Intel Corporation

Description

Uncontrolled search path for some Approximate Bayesian Inference Framework before version on commit #484c949 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires passive user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-11
Last Modified
2026-08-11
Generated
2026-08-11
AI Q&A
2026-08-11
EPSS Evaluated
N/A
NVD
EUVD

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
intel approximate_bayesian_inference_framework to 484c949 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-427 The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Approximate Bayesian Inference Framework before commit #484c949 allows an escalation of privilege due to an uncontrolled search path. An unprivileged attacker could exploit it by combining with a privileged user under specific conditions, potentially impacting system confidentiality, integrity, and availability.

Detection Guidance

This vulnerability requires local access and specific attack conditions. Check for unpatched versions of the Approximate Bayesian Inference Framework before commit #484c949. Inspect system logs for unusual privilege escalation attempts or unauthorized access patterns.

Impact Analysis

If exploited, this vulnerability may allow an attacker to gain higher privileges on your system, potentially leading to unauthorized access, data breaches, or system compromise. The impact includes high risks to confidentiality, integrity, and availability of the system.

Mitigation Strategies

Update the Approximate Bayesian Inference Framework to the latest version beyond commit #484c949. Restrict local access to privileged users and monitor for suspicious activity. Apply principle of least privilege to limit potential attack vectors.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-32788. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart