Dell SupportAssist OS Recovery Temporary File Vulnerability Leading to Privilege Escalation

A vulnerability exists in Dell SupportAssist OS Recovery versions prior to 5.5.14.0, allowing local authenticated attackers to exploit the creation of temporary files with insecure permissions. This could lead to unauthorized elevation of privileges.

Impact

Exploitation of this vulnerability could result in unauthorized access to elevated privileges, allowing a user to perform actions or access resources that are normally restricted.

Remediation

Users can update to Dell SupportAssist OS Recovery version 5.5.14.0 or later. Instructions for verifying the current version and updating the application are available in the Dell Security Advisory DSA-2025-315.