CVE-2026-20728

Intel TensorFlow extension has a local privilege boundary weakness

Intel · Intel Extension for TensorFlow

First documented disclosure · Review checkpoint

Summary

A local protection failure can allow privilege escalation.

Severity and exploitation evidence

Medium · 5.4/10 · CVSS 4.0. Severity source.

Exploitation not established: Vendor advisory; the reviewed evidence establishes neither malicious exploitation nor a victim.

Exploitation evidence source

Technical severity is not a measure of observed attacks or of risk to your deployment. Attempts, demonstrations, and successful compromise retain the qualifications in the source.

How the weakness works

Intel identifies a protection-mechanism failure in user-space software; implementation details are not disclosed.

Conditions required

Local access, high privileges, passive user interaction and additional attack conditions, per Intel’s CVSS 4.0 vector.

Potential impact

Potential confidentiality, integrity and availability loss on the affected system.

Affected versions and configurations

CNA: before 2.15.0.3; Intel’s product table specifically includes 2.15.0.3 downloaded before November 14, 2025.

Fix and mitigation status

Intel recommends a refreshed 2.15.0.3 or later build; do not treat an old artifact with that same version as fixed.

Practical next steps

Replace pre-cutoff downloads with the current vendor distribution and verify artifact provenance.

Operating lesson

The affected and recommended version numbers overlap; download provenance matters.

Evidence and limits

August 11 is the original advisory date. Later NVD modification is not a new disclosure. Apply the download-date qualification when assessing the same numbered release.

Sources