CVE-2024-21799

Name of the Vulnerable Software and Affected Versions: Intel(R) Extension for Transformers versions prior to 1.5

Description: The issue is related to path traversal in the Intel(R) Extension for Transformers software, which may allow an authenticated user to potentially enable escalation of privilege via local access. This is due to incorrect restriction of the directory path name with limited access. Exploitation of the issue may allow an attacker to elevate their privileges.

Recommendations: For versions prior to 1.5, update to version 1.5 or later to resolve the issue. As a temporary workaround, consider restricting local access to the software to minimize the risk of exploitation.