ID:12161 - Exploit for Untrusted search path in Intel products - CVE-2025-31931

 
Main Vulnerability Database Exploits ID:12161 - Exploit for Untrusted search path in Intel products - CVE-2025-31931

ID:12161 - Exploit for Untrusted search path in Intel products - CVE-2025-31931

Published: November 28, 2025


Vulnerability identifier: #VU118699
Vulnerability risk: Low
CVE-ID: CVE-2025-31931
CWE-ID: CWE-426
Exploitation vector: Local access
Vulnerable software:
Instrumentation and Tracing Technology API (ITT API)
Intel oneAPI Base Toolkit
Intel HPC Toolkit
Intel VTune Profiler

Link to public exploit:


Vulnerability description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to usage of an untrusted search path. A local user can place a malicious binary into a specific location on the system and execute arbitrary code with escalated privileges.


Remediation

Install updates from vendor's website.