OS Command Injection Vulnerability in Dell PowerProtect Data Domain
CVE-2025-46644
6MEDIUM
Key Information:
- Vendor
Dell
- Status
- Powerprotect Data Domain With Data Domain Operating System (dd Os) Feature Release
- Powerprotect Data Domain With Data Domain Operating System (dd Os) Lts 2025
- Powerprotect Data Domain With Data Domain Operating System (dd Os) Lts2024
- Powerprotect Data Domain With Data Domain Operating System (dd Os) Lts2023
- Vendor
- CVE Published:
- 9 January 2026
What is CVE-2025-46644?
Dell PowerProtect Data Domain systems, including several feature and long-term support release versions, are susceptible to an OS Command Injection vulnerability. This flaw allows a high privileged attacker with local access to potentially execute arbitrary commands on the system, compromising its security and integrity. Proper mitigations and updates are essential to safeguard against potential exploitation.
Affected Version(s)
PowerProtect Data Domain with Data Domain Operating System (DD OS) Feature Release 7.7.1.0 < 8.5.0.0
PowerProtect Data Domain with Data Domain Operating System (DD OS) LTS 2025 8.3.1.0 < 8.3.1.20
PowerProtect Data Domain with Data Domain Operating System (DD OS) LTS2023 7.10.1.0 < 7.10.1.80