PT-2025-46711 · Dell · Dell Data Lakehouse

Published 2025-11-12 · Updated 2025-12-05 · CVE-2025-46608

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell Data Lakehouse versions prior to 1.6.0.0

Description Dell Data Lakehouse is affected by an Improper Access Control issue. A remotely accessible attacker with high privileges could potentially exploit this, leading to Elevation of privileges. This could result in unauthorized access with elevated privileges, potentially compromising system integrity and customer data.

Recommendations Upgrade to version 1.6.0.0 or later.

Fix

LPE

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

BDU:2026-02075

CVE-2025-46608

Affected Products

Dell Data Lakehouse

References · 17

• https://nvd.nist.gov/vuln/detail/CVE-2025-46608 · Security Note
• https://bdu.fstec.ru/vul/2026-02075 · Security Note
• https://dell.com/support/kbdoc/en-us/000390529/dsa-2025-375-security-update-for-dell-data-lakehouse-multiple-vulnerabilities · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-46608 · Vendor Advisory
• https://twitter.com/CCBalert/status/1989236505236140522 · Twitter Post
• https://t.me/pentestingnews/70865 · Telegram Post
• https://twitter.com/NetSecIO/status/1988999244917723465 · Twitter Post
• https://twitter.com/dailycve/status/1997078567671525463 · Twitter Post
• https://twitter.com/CVEnew/status/1988721696841285801 · Twitter Post
• https://twitter.com/0dayPublishing/status/1988704593891533077 · Twitter Post
• https://reddit.com/r/SecOpsDaily/comments/1owvvpg/rce_through_misconfigurations_severe_privilege · Reddit Post
• https://twitter.com/gothburz/status/1988978003309740458 · Twitter Post
• https://t.me/purp_sec/1280 · Telegram Post
• https://twitter.com/dailytechonx/status/1989374045159092263 · Twitter Post
• https://twitter.com/fridaysecurity/status/1988787986201473127 · Twitter Post