CVEvulnerability

CVE-2025-46608

7.2 HIGH Published 2025-11-12 Modified 2026-10-18 Official page ↗
Status
Analyzed
Published
2025-11-12
Last modified
2026-10-18
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.1 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS 3.1 ([email protected])
7.2 HIGH — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-284

Description

Dell Data Lakehouse, versions prior to 1.6.0.0, contain(s) an Improper Access Control vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges. This vulnerability is considered Critical, as it may result in unauthorized access with elevated privileges, compromising system integrity and customer data. Dell recommends customers upgrade to the latest version at the earliest opportunity.

Affected configurations

• dell data lakehouse (< 1.6.0.0)

Related

Weakness · CWE (1)

  • CWE-284 Improper Access Control weakness

References