Untrusted Search Path Vulnerability in Dell OS Recovery Tool
CVE-2026-82155

7.8HIGH

Key Information:

Vendor

Dell
Status
Os Recovery Tool
Vendor
CVE Published:
3 November 2026

What is CVE-2026-82155?

The Dell OS Recovery Tool prior to version 2.4.4 contains a vulnerability due to improper handling of paths during installation. An unauthenticated attacker with local access can exploit this flaw to execute arbitrary commands, potentially compromising the system. It is crucial for users to update to the latest version to mitigate this security risk.

Affected Version(s)

OS Recovery tool 0 < 2.4.4

References

https://www.dell.com/support/kbdoc/en-us/000515018/dsa-20...
vendor-advisory

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.