Database/Control plane, storage & DevOps
Intel Neural Compressor (TOCTOU): A time-of-check/time-of-use race in Neural Compressor lets an authenticated local
CVSS 4.7CVE-2024-21792Control plane, storage & DevOpscurated
Impact
A time-of-check/time-of-use race in Neural Compressor lets an authenticated local user win a window and read information they should not. Low severity on its own; useful as a step in a chain on a shared optimisation node.
Who can reach it
Authenticated local user on the node running Neural Compressor.
What to do
Upgrade to 2.5.0 or later. Package update, service restart.
References
Related entries
- GitLab: stored XSS via pasted HTML in the Content EditorCVE-2026-19619 · GitLab CE/EE (Content Editor, pasted HTML sanitization)Medium
- Rittal CMC III cabinet lock / access-card system: The access cards used to open control cabinets secured with RittalCVE-2022-40633 · Rittal CMC III cabinet lock / access-card systemMedium
- Keycloak: Redirect scheme filtering bypassed by appending a wildcardCVE-2023-6134 · KeycloakMedium
- Keycloak: Wildcard in the JARM form_post.jwt response modeCVE-2023-6927 · KeycloakMedium
- MinIO (SFTP gateway): The SFTP frontend trusts an SSH public key it should not, letting an attacker authenticate asCVE-2025-27414 · MinIO (SFTP gateway)Medium
- HashiCorp Vault: KV v2 leaks sensitive payload content into server and audit logs on malformed requestsCVE-2025-4166 · HashiCorp VaultMedium
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.