PT-2026-7306 · Unknown · Ai Playground

Publicado 2026-02-10 · Atualizado 2026-02-10 · CVE-2025-32452

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Média

Vetor base

AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions AI Playground versions prior to 2.6.1 beta

Description An uncontrolled search path exists in some AI Playground versions prior to 2.6.1 beta within Ring 3: User Applications, potentially allowing for privilege escalation. An unprivileged software adversary with an authenticated user and a high complexity attack may enable privilege escalation through local access. Active user interaction is required for a successful attack. The issue may impact the confidentiality, integrity, and availability of the vulnerable system.

Recommendations Update to version 2.6.1 beta or later.

Correção

Uncontrolled Search Path Element

Enumeração de Fraquezas

CWE-427

Identificadores relacionados

CVE-2025-32452

Produtos afetados

Ai Playground

Referências · 3

• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01415.html · Nota
• https://twitter.com/CVEnew/status/2021279071397675254 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-32452 · Nota de Segurança