CVE-2026-20703 is a vulnerability in BigDL versions before 2.4.0 involving a protection mechanism failure within Ring 3. This flaw may allow an unprivileged user, combined with a privileged user, to escalate privileges via local access with low complexity and passive user interaction. The vulnerability impacts confidentiality, integrity, and availability at a high level within the vulnerable system context.