Dell AppSync 4.6.0 contains a Unix symbolic‑link following flaw that allows an attacker who has local, low‑privilege access to modify files that the application is allowed to write. Exploiting this vulnerability can lead to unauthorized information tampering, potentially compromising data integrity on the affected host.

The flaw affects Dell AppSync version 4.6.0. The impact applies to installations of the Dell AppSync product on Unix‑based operating systems where the application runs with local user privileges.

The CVSS base score of 7.3 indicates a moderate to high severity, and the EPSS score of less than 1% suggests that exploitation is unlikely at present. The vulnerability requires local access and does not involve remote exploitation. It is not listed in the CISA KEV catalog, indicating no known widespread active exploitation at this time. The flaw remains significant for environments where the application is used in ways that allow local users to run AppSync or where file integrity is critical.