Intel Neural Compressor: Unauthenticated input-validation failure leading to escalation of privilege in Neural

Impact

Unauthenticated input-validation failure leading to escalation of privilege in Neural Compressor. Another reason not to leave the optimisation service on an open cluster network.

Who can reach it

Unauthenticated, network-reachable where the service is exposed.

What to do

Upgrade to v3.0 or later and gate the service behind auth and network policy.

References