CVE-2026-34175

Awaiting Analysis Awaiting Analysis - Queue

Hardware-Aware-Automated-MachineLearning NA Privilege Escalation

Publication date: 2026-08-11

Last updated on: 2026-08-12

Assigner: Intel Corporation

Description

Uncontrolled search path for some Hardware-Aware-Automated-MachineLearning NA before version 45cd723 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires passive user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-11

Last Modified

2026-08-12

Generated

2026-09-01

AI Q&A

2026-08-12

EPSS Evaluated

2026-08-30

NVD

CVE-2026-34175

EUVD

EUVD-2026-56531

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-427	The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

Attack-Flow Graph

Executive Summary

This vulnerability involves an uncontrolled search path in Hardware-Aware-Automated-MachineLearning software before version 45cd723. It allows an unprivileged attacker with a privileged user account to escalate privileges through a low-complexity attack. The attack requires local access, passive user interaction, and no special internal knowledge.

Detection Guidance

Detection requires checking for the presence of Hardware-Aware-Automated-MachineLearning NA versions before 45cd723. Review installed software versions and compare against the vulnerable commit. No specific commands are provided in the context.

Impact Analysis

This vulnerability can lead to significant impacts such as loss of system confidentiality, integrity, and availability. An attacker could gain elevated privileges, potentially compromising sensitive data or disrupting system operations.

Compliance Impact

The vulnerability may impact confidentiality, integrity, and availability of the system, which could lead to unauthorized access or data breaches. This could potentially affect compliance with standards like GDPR or HIPAA if sensitive data is exposed or altered.

Mitigation Strategies

Update Hardware-Aware-Automated-MachineLearning to version 45cd723 or later to address the uncontrolled search path issue. Ensure proper access controls are in place to limit local access by unprivileged users. Monitor system logs for unusual privilege escalation attempts.

Hi! I’m here to help you understand CVE-2026-34175. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70