CVE-2026-21387

Intel LLM Library for PyTorch is discontinued with a privilege flaw

Intel · Intel LLM Library for PyTorch

First documented disclosure · Review checkpoint

Summary

A local protection failure can allow privilege escalation.

Severity and exploitation evidence

Medium · 5.4/10 · CVSS 4.0. Severity source.

Exploitation not established: Vendor advisory; the reviewed evidence establishes neither malicious exploitation nor a victim.

Exploitation evidence source

Technical severity is not a measure of observed attacks or of risk to your deployment. Attempts, demonstrations, and successful compromise retain the qualifications in the source.

How the weakness works

Intel identifies a protection-mechanism failure in user-space software; implementation details are not disclosed.

Conditions required

Local access, high privileges, passive user interaction and additional attack conditions, per Intel’s CVSS 4.0 vector.

Potential impact

Potential confidentiality, integrity and availability loss on the affected system.

Affected versions and configurations

All versions, per Intel’s affected-product table.

Fix and mitigation status

No security update is offered; Intel discontinued this library.

Practical next steps

Uninstall or discontinue use as Intel recommends and migrate to supported tooling.

Operating lesson

Track support status alongside vulnerability severity.

Evidence and limits

August 11 is the original advisory date. Later NVD modification is not a new disclosure. The vendor explicitly recommends withdrawal rather than a security upgrade.

Sources