CVE-2026-82153: Low severity Dell OS Recovery Tool vulnerability
Dell OS Recovery Tool, versions prior to 2.4.4, contains an Insecure Storage of Sensitive Information vulnerability. A low privileged attacker with physical access could potentially exploit this vulnerability, leading to Information Disclosure.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Dell OS Recovery Toolto a version that resolves this vulnerability.Fixed in 2.4.4
Event History
Frequently Asked Questions
Who is realistically exposed to this vulnerability?
Systems running Dell OS Recovery Tool versions earlier than 2.4.4 are affected. Exploitation requires a low-privileged attacker to have physical access to the system.
What does an attacker need to exploit the issue?
The attacker needs physical access, low-level privileges, and user interaction. Successful exploitation could disclose sensitive information; integrity and availability impacts are not identified in the provided data.
What version should be installed to remediate the issue?
Update Dell OS Recovery Tool to version 2.4.4 or later.