CVE-2025-46366 is a privilege escalation vulnerability affecting Dell CloudLink versions prior to 8.1.1. A privileged user can exploit this to gain parallel privilege escalation or unauthorized access to the underlying database, potentially compromising confidential information. With a CVSS score of 6.7 (MEDIUM), it requires local access and high privileges but has high impacts on confidentiality, integrity, and availability. Currently, there is no public exploit code available (Metasploit, Nuclei, ExploitDB), and it shows no signs of active exploitation or significant community discussion.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 8.1.1CPE matchmatch criteria | cpe:2.3:a:dell:cloudlink:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.