CVE-2025-22480

Summary

CVE-2025-22480 is a vulnerability affecting Dell SupportAssist OS Recovery versions before 5.5.13.1. An attacker with local access can exploit this symbolic link attack, potentially resulting in arbitrary file deletion and elevation of privileges. This issue poses a significant risk, particularly in environments where local access is not tightly controlled. System administrators are advised to update to the latest version of Dell SupportAssist OS Recovery as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.