PT-2026-7306 · Unknown · Ai Playground

Published 2026-02-10 · Updated 2026-02-10 · CVE-2025-32452

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions AI Playground versions prior to 2.6.1 beta

Description An uncontrolled search path exists in some AI Playground versions prior to 2.6.1 beta within Ring 3: User Applications, potentially allowing for privilege escalation. An unprivileged software adversary with an authenticated user and a high complexity attack may enable privilege escalation through local access. Active user interaction is required for a successful attack. The issue may impact the confidentiality, integrity, and availability of the vulnerable system.

Recommendations Update to version 2.6.1 beta or later.

Fix

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2025-32452

Affected Products

Ai Playground

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2025-32452 · Security Note
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01415.html · Note
• https://twitter.com/CVEnew/status/2021279071397675254 · Twitter Post