PT-2026-2466 · Dell · Dell Supportassist Os Recovery

Published 2026-01-13 · Updated 2026-01-13 · CVE-2025-46685

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell SupportAssist OS Recovery versions prior to 5.5.15.1

Description Dell SupportAssist OS Recovery versions prior to 5.5.15.1 contain a flaw related to insecure temporary file permissions. A local attacker with low privileges could potentially exploit this issue to gain elevated privileges on the system.

Recommendations Update Dell SupportAssist OS Recovery to version 5.5.15.1 or later.

Fix

LPE

Weakness Enumeration

CWE-378

Related Identifiers

CVE-2025-46685

Affected Products

Dell Supportassist Os Recovery

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-46685 · Security Note
• https://osv.dev/vulnerability/CVE-2025-46685 · Vendor Advisory
• https://dell.com/support/kbdoc/en-us/000401506/dsa-2025-456 · Vendor Advisory
• https://twitter.com/CVEnew/status/2011120636828041461 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2011160138418094445 · Twitter Post