CVE-2026-35060
AI Playground omitted authentication on a critical local operation
Intel · AI Playground
First documented disclosure · Review checkpoint
Summary
A privileged application function lacked the expected authentication check. A local application user could gain additional privileges.
Severity and exploitation evidence
Low · 2.0/10 · CVSS 4.0. Severity source.
Exploitation not established: The reviewed advisory does not report malicious exploitation.
Technical severity is not a measure of observed attacks or of risk to your deployment. Attempts, demonstrations, and successful compromise retain the qualifications in the source.
How the weakness works
A privileged application function lacked the expected authentication check.
Conditions required
An authenticated local user could reach the vulnerable operation under the conditions in Intel’s advisory.
Potential impact
A local application user could gain additional privileges.
Affected versions and configurations
Before 3.1.1 beta.
Fix and mitigation status
3.1.1 beta.
Practical next steps
Update AI Playground to 3.1.1 beta or later.
Operating lesson
Check the installed component and distribution channel when matching a model workload to a driver or library fix.
Evidence and limits
The CVE record was published on 2026-11-10.
Sources
- Intel product security advisory
Primary source ·
- intel CVE record
Primary source ·