CVE-2026-82155 is a vulnerability in Dell Os Recovery Tool
Published on November 3, 2026
Dell OS Recovery tool versions, prior to 2.4.4, contain a use of Untrusted Search Path vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Command execution.
Vulnerability Analysis
CVE-2026-82155 can be exploited with local system access, requires user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to be very high.
Weakness Type
Unquoted Search Path or Element
The product uses a search path that contains an unquoted element, in which the element contains whitespace or other separators. This can cause the product to access resources in a parent path. If a malicious individual has access to the file system, it is possible to elevate privileges by inserting such a file as "C:\Program.exe" to be run by a privileged program making use of WinExec.
Products Associated with CVE-2026-82155
Want to know whenever a new CVE is published for Dell Os Recovery Tool? stack.watch will email you.
Affected Versions
Dell OS Recovery tool:- Before 2.4.4 is affected.