Description

Dell AppSync Version 4.6.0.0, Dell Metro Node Version 8.0.0, Dell UCC Edge Version 3.0.1, Dell VxRail Version 8.0.322, Dell PowerMax Version 10.3.0, Dell Unity Version 5.4, Dell PowerFlex Manager Version 4.5.4, Dell PowerFlex Intelligent Catalog Versions 46.377.00 and 46.382.00 and Dell PowerFlex Rack version 4.5.4 and prior versions, contain(s) an UNIX Symbolic Link (Symlink) Following vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.

Executive Summary

Technical Details

Mitigations

References

Additional Metadata

{
  "score": "7.3",
  "pubDate": "2026-08-18T18:17:28.573Z",
  "pubdate": "2026-08-18T18:17:28.573Z",
  "executiveSummary": "An UNIX Symbolic Link (Symlink) Following vulnerability exists in multiple Dell products, including Dell AppSync Version 4.6.0.0, Dell Metro Node Version 8.0.0, Dell UCC Edge Version 3.0.1, Dell VxRail Version 8.0.322, Dell PowerMax Version 10.3.0, Dell Unity Version 5.4, Dell PowerFlex Manager Version 4.5.4, Dell PowerFlex Intelligent Catalog Versions 46.377.00 and 46.382.00, and Dell PowerFlex Rack version 4.5.4 and prior versions.\nThe vulnerability allows a low-privileged local attacker to potentially exploit the system, leading to an Elevation of Privileges.\nThe risk implications involve unauthorized local users manipulating file system operations through insecure symlink resolution, potentially accessing or modifying restricted files that would otherwise be protected.\nSuccessful exploitation requires local access to the vulnerable system and low-privileged execution capabilities.\nAffected systems span various enterprise storage, hyper-converged infrastructure, and management platforms provided by Dell, necessitating prioritized patching or remediation across the enterprise ecosystem.",
  "technicalDetails": "The root cause of the vulnerability stems from insecure file handling practices where the application processes files or follows symbolic links without adequately validating the destination or ownership of the target file.\nThe vulnerability manifests as an UNIX Symbolic Link (Symlink) Following flaw, allowing an adversary to induce privileged processes to read from or write to arbitrary files on the underlying operating system.\nThe exploitation method relies on the attacker creating a symbolic link within a writable directory pointing to a sensitive system file (such as configuration files or logs restricted to higher-privileged users).\nThe attack flow proceeds as follows: First, the low-privileged attacker establishes local access to the host environment. Second, the attacker identifies a file operation performed by a higher-privileged daemon, script, or administrative process that interacts with predictable file paths or fails to restrict symlink traversal. Third, the attacker plants a crafted symlink in a location accessed by the privileged process. Fourth, when the privileged component executes its file input/output routine, it follows the symlink, inadvertently exposing sensitive data to the attacker or overwriting critical system files.\nAuthentication requirements are limited to local access, meaning the attacker must already possess a valid low-privileged local user shell or execution context on the target operating system.\nPrivilege requirements are low, as the attacker initiates the exploit chain using standard unprivileged credentials.\nNetwork exposure is not directly applicable to the initial exploit vector, as the vulnerability requires local host interaction to establish the malicious symbolic link structures.\nPost-exploitation impact includes successful Elevation of Privileges, granting the local attacker unauthorized capabilities such as modifying protected system components, escalating to root or administrative privileges, or compromising the confidentiality and integrity of the affected Dell platform."
}