CVE-2026-41121
Awaiting Analysis Awaiting Analysis - Queue

Dell Device Management Agent Link Following Local Privilege Escalation

Publication date: 2026-07-01

Last updated on: 2026-07-01

Assigner: Dell

Description
Dell Device Management Agent, versions prior to DDMA 26.05, contain an Improper Link Resolution Before File Access ('Link Following’) vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-01
Last Modified
2026-07-01
Generated
2026-07-02
AI Q&A
2026-07-01
EPSS Evaluated
N/A
NVD
CVE-2026-41121
EUVD
EUVD-2026-41117

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
dell device_management_agent to 26.05 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-59 The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Impact Analysis

Exploitation of this vulnerability could allow a low privileged local attacker to gain higher privileges on the system.

This elevation of privileges can lead to unauthorized access, modification, or deletion of sensitive data, and potentially full control over the affected device.

Executive Summary

This vulnerability exists in Dell Device Management Agent versions prior to DDMA 26.05. It is an Improper Link Resolution Before File Access vulnerability, also known as 'Link Following'.

A low privileged attacker with local access could exploit this flaw to elevate their privileges on the affected system.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-41121. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart