CVE-2026-82155: High severity vulnerability
Published Nov 3, 2026
·Updated
Dell OS Recovery tool versions, prior to 2.4.4, contain a use of Untrusted Search Path vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Command execution.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Dell OS Recovery toolto a version that resolves this vulnerability.Fixed in 2.4.4
Event History
Nov 3, 2026
CVE Published
via MITRE·08:32 PM
Data Sourced
via MITRE·08:32 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which systems are exposed?
Systems with Dell OS Recovery tool versions earlier than 2.4.4 are affected. Exploitation requires local access to the system.
2
Does an attacker need an account or elevated privileges?
No privileges are required according to the CVSS vector, but the attacker must have local access and user interaction is required.
3
What is the remediation?
Update Dell OS Recovery tool to version 2.4.4 or later.