An improper link resolution before file access flaw allows a local user to manipulate symbolic or shortcut links, tricking Dell Optimizer into accessing files it should not read or execute. This flaw can result in privilege escalation, giving the attacker higher rights on the system. The weakness is characterized by CWE‑59.

Any installation of Dell Optimizer older than version 6.3.1 is affected. This includes all variants of the product distributed under the Dell:Optimizer CPE. Users should verify their installed version and consider the update if they remain on an older build.

The CVSS score of 7.3 reflects a moderate to high severity, while the EPSS score of less than 1% indicates a low likelihood of active exploitation at the present time. The vulnerability is not listed in CISA's KEV catalog. Because the attack requires local, low‑privileged access, the exploitation vector is limited to users who can run Optimizer or influence its environment, and an attacker would need to create or manipulate a link to trigger the flaw.