CVE-2025-46364CWE-269privilege-escalation

CVE-2025-46364

Critical · published November 5, 2025

CVSS v3.1
9.1
EPSS
0%
Percentile
24.6
In the wild
Unconfirmed
What it is

🚨 A privileged user can completely take control of a Dell CloudLink system with just their password! 🔥 Think of it like a hotel manager who holds the master key to every room and can waltz in uninvited — they could access sensitive information or even change the locks on you! If exploited, this vulnerability could allow an attacker to run the command line interface (CLI) without restriction, potentially leading to data breaches or unauthorized changes. The ramifications could be absolutely devastating for any organization relying on the system, opening the door to critical security incidents.

Put simply

Think of it like a hotel manager who holds the master key to every room and can waltz in uninvited — they could access sensitive information or even change the locks on you! This vulnerability in Dell CloudLink versions prior to 8.1.1 allows a privileged user with a known password to bypass normal command restrictions, executing arbitrary commands that could compromise the entire system.

What to do

If exploited, this vulnerability could allow an attacker to run the command line interface (CLI) without restriction, potentially leading to data breaches or unauthorized changes. The ramifications could be absolutely devastating for any organization relying on the system, opening the door to critical security incidents. Immediately upgrade Dell CloudLink to version 8.1.1 or later to address this flaw. Additionally, review access controls and ensure that only trusted users have privileged access to the system. You've got this! Secure your system and keep those keys locked away! 🛡️

The record
Technical detail
CVSS v3.1
9.1 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00327 · 24.6th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2025-11-05T22:15Z
Affected products (1)
ProductVersionsFixed in
dell/cloudlink< 8.1.18.1.1
References (1)
EPSS history
Timeline
  • 05 NOV 16:36Z
    Dell CloudLink, versions prior to 8.1.1, contain a vulnerability where a privileged user with known password can run CLI Escape Vulnerability to gain control…
    cvelistv5