Insecure Temporary File Permissions in Dell SupportAssist OS Recovery

Publication date: 2026-01-13

Last updated on: 2026-02-13

Assigner: Dell

Description

Dell SupportAssist OS Recovery, versions prior to 5.5.15.1, contain a Creation of Temporary File With Insecure Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Tampering.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-01-13

Last Modified

2026-02-13

Generated

2026-07-06

AI Q&A

2026-01-14

EPSS Evaluated

2026-07-05

NVD

CVE-2025-46684

EUVD

EUVD-2026-2227

Affected Vendors & Products

Vendor	Product	Version / Range
dell	supportassist_os_recovery	to 5.5.15.1 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-378	Opening temporary files without appropriate measures or controls can leave the file, its contents and any function that it impacts vulnerable to attack.

Attack-Flow Graph

Executive Summary

This vulnerability exists in Dell SupportAssist OS Recovery versions prior to 5.5.15.1, where the software creates temporary files with insecure permissions. A low privileged attacker with local access could exploit this flaw to tamper with information.

Impact Analysis

Exploitation of this vulnerability could allow a low privileged local attacker to tamper with information, potentially leading to integrity and availability issues on the affected system.

Hi! I’m here to help you understand CVE-2025-46684. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70