Insecure Storage of Sensitive Information in Dell OS Recovery Tool
CVE-2026-82153

2.2LOW

Key Information:

Vendor

Dell
Status
Os Recovery Tool
Vendor
CVE Published:
14 October 2026

What is CVE-2026-82153?

The Dell OS Recovery Tool prior to version 2.4.4 contains a vulnerability that allows for the insecure storage of sensitive information. A low privileged attacker with physical access to the system may exploit this vulnerability, potentially leading to the unauthorized disclosure of sensitive data. Organizations using affected versions should consider updating to mitigate the risk associated with this security flaw.

Affected Version(s)

OS Recovery Tool 0 < 2.4.4

References

https://www.dell.com/support/kbdoc/en-us/000517461/dsa-20...

CVSS V3.1

Score:
2.2
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Dell would like to thank OriGabriel for reporting this issue.
.