CVE-2022-26425

HIGH 7.3CVE-2022-26425 · Published 16/02/2023 · updated 17/06/2026

In short

CVE-2022-26425 is a HIGH (CVSS 7.3) vulnerability affecting oneapi collective communications library (intel).
Chance of exploitation in the next 30 days (EPSS): 0.18%, higher than 7.8% of all vulnerabilities.
Fix: update to 2021.6 or later.

Package	Affected versions	Patched versions
oneapi collective communications library intel	`< 2021.6`	`2021.6`

Description

Uncontrolled search path element in the Intel(R) oneAPI Collective Communications Library (oneCCL) before version 2021.6 for Intel(R) oneAPI Base Toolkit may allow an authenticated user to potentially enable escalation of privilege via local access.

References

intel.com/content/www/us/en/security-center/advisory/intel-sa-00674.html · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free