# Windows AI: a search path flaw could reach SYSTEM privileges

> CVE-2026-69923 is a local privilege escalation flaw in Windows AI, fixed in Microsoft's October 2026 security release.

- **Severity:** Medium: Real and reproducible, but needs unusual setup, user help or a narrow audience. Plan a fix.
- **Category:** Vulnerability
- **Published by:** Microsoft
- **Disclosed:** 2026-10-13
- **CVE:** CVE-2026-69923
- **CVSS:** 7.8
- **Affects:** Windows AI
- **Research by:** Microsoft Security Response Center
- **Primary source:** https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69923
- **Page:** https://theinjection.dev/items/microsoft-windows-ai-search-path-eop/

Windows AI carries an uncontrolled search path flaw, CVE-2026-69923, that let a local attacker with an ordinary account elevate to SYSTEM. Microsoft published the fix on October 13 and rates exploitation more likely.

## What happened

Microsoft disclosed CVE-2026-69923 on October 13, 2026 in release 2026-Oct, rating it Important with a CVSS 3.1 base score of 7.8. The advisory FAQ states that an attacker who exploited the flaw could gain SYSTEM privileges. Microsoft records the flaw as neither exploited nor publicly disclosed before the fix.

## How it works

An uncontrolled search path element, CWE-427, is the mechanism: the affected component resolves a file it needs from a location that a user without administrative rights can write to, so attacker code loads in place of the expected file and runs with the higher privileges of the service. Microsoft's vector records local access, low attack complexity, low privileges and no user interaction.

## Who is affected

Windows installations that carry the Windows AI component are in scope, and exploitation needs an attacker who can already sign in to the machine. Microsoft tags the product as Windows AI and its record lists no specific builds or editions.

## What to do

Install Microsoft's October 2026 security updates, which the record marks as customer action required and whose vector reports an official fix. Microsoft's own exploitability rating is Exploitation More Likely, so put this ahead of equally scored flaws on shared and multi-user machines, where a local account is easier to come by.

## Quick facts

- **Affected:** Windows AI
- **CVE:** CVE-2026-69923
- **CVSS:** 7.8 on CVSS 3.1, from Microsoft; 6.8 temporal
- **Attack type:** Local elevation of privilege to SYSTEM, CWE-427
- **Status:** Official fix in release 2026-Oct; not exploited and not publicly disclosed before the fix, per Microsoft
- **Exploitability:** Exploitation More Likely, Microsoft's rating
- **Disclosed:** October 13, 2026

## Sources

1. [MSRC Advisory](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69923)
2. [NVD Record](https://nvd.nist.gov/vuln/detail/CVE-2026-69923)
3. [GitHub Advisory](https://github.com/advisories/GHSA-793v-c26g-q9m4)