CVE-2026-20755

Intel LLM Scaler has a local privilege boundary weakness

Intel · LLM Scaler

First documented disclosure · Review checkpoint

Summary

A local protection failure can allow privilege escalation.

Severity and exploitation evidence

Medium · 5.4/10 · CVSS 4.0. Severity source.

Exploitation not established: Vendor advisory; the reviewed evidence establishes neither malicious exploitation nor a victim.

Exploitation evidence source

Technical severity is not a measure of observed attacks or of risk to your deployment. Attempts, demonstrations, and successful compromise retain the qualifications in the source.

How the weakness works

Intel identifies a protection-mechanism failure in user-space software; implementation details are not disclosed.

Conditions required

Local access, high privileges, passive user interaction and additional attack conditions, per Intel’s CVSS 4.0 vector.

Potential impact

Potential confidentiality, integrity and availability loss on the affected system.

Affected versions and configurations

Version 1.0 downloaded before September 11, 2025, per Intel.

Fix and mitigation status

Intel recommends a refreshed version 1.0 or later; the older same-version download remains affected.

Practical next steps

Replace pre-cutoff downloads with the current vendor distribution and restrict privileged execution.

Operating lesson

A version string alone does not identify a rebuilt security artifact.

Evidence and limits

August 11 is the original advisory date. Later NVD modification is not a new disclosure. Apply the download-date qualification when assessing the same numbered release.

Sources