CVE-2026-82155
HighCVSS 7.8Summary
Dell OS Recovery Tool versions prior to 2.4.4 contain an untrusted search path vulnerability. An unauthenticated attacker with local access could potentially exploit it to execute commands.
Risk Assessment
Local command execution can let an attacker run malicious code in the victim's context. However, it requires local access to the system.
Recommendation
Upgrade Dell OS Recovery Tool to version 2.4.4 or later. Avoid running the tool from directories writable by unprivileged users.
Other vulnerabilities in Dell OS Recovery Tool
See all- CVE-2026-82154Low
Dell OS Recovery tool versions prior to 2.4.4 contain a use of Hard-coded Cryptographic Key vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to Information Disclosure.
- CVE-2026-82153Low
Dell OS Recovery Tool, versions prior to 2.4.4, contains an Insecure Storage of Sensitive Information vulnerability. A low privileged attacker with physical access could potentially exploit this vulnerability, leading to Information Disclosure.
Original NVD description (English source)
Dell OS Recovery tool versions, prior to 2.4.4, contain a use of Untrusted Search Path vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Command execution.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS