This vulnerability arises from an uncontrolled search path in Hardware-Aware-Automated-MachineLearning NA prior to version 45cd723 within Ring 3 user applications. It allows an escalation of privilege when an unprivileged attacker collaborates with a privileged user. The attack complexity is low, requiring only passive user interaction and local access. The CVSS 4.0 base score is 5.4 (medium severity), with high impact on confidentiality, integrity, and availability of the vulnerable system. No official remediation or patch has been disclosed yet.

Successful exploitation could lead to escalation of privilege, potentially compromising the confidentiality, integrity, and availability of the affected system at a high impact level. However, the vulnerability requires local access, a privileged user context, and passive user interaction, limiting the attack vector. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, limit local access to trusted users and monitor for suspicious activity involving privilege escalation attempts.