Dell Device Management Agent contains an Improper Check for Unusual or Exceptional Conditions that permits a local attacker with low privileges to disrupt the agent’s operation. The flaw can cause the agent to crash or enter an erroneous state, preventing it from performing its device management duties and potentially affecting device availability. The impact is limited to the affected agent instances and does not provide remote code execution or data exposure.

The vulnerability affects Dell Device Management Agent versions earlier than 26.02. Only installations running those legacy versions are susceptible.

The CVSS score of 3.3 indicates low severity, and the EPSS score of less than 1% suggests that exploitation is unlikely at present. The vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog, further reducing the immediate threat level. However, because the attack vector is local and requires only low‑privileged access, any user with physical or administrative access could trigger a denial of service, disrupting device management operations.