Dell ECS 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions older than 4.3.0.0 contain an improper privilege management flaw in the operating system, classified as CWE‑269. An attacker who already enjoys local high privileges can exploit this weakness to raise their privileges to system level, thereby gaining full control over the affected node and potentially compromising data confidentiality, integrity and availability.

Dell Enterprise Content Services (ECS) versions 3.8.1.0 to 3.8.1.7, and Dell ObjectScale versions prior to 4.3.0.0.

The CVSS score of 6.7 indicates moderate severity while the EPSS score of less than 1 % signifies a very low probability of exploitation in the wild; the vulnerability is not listed in the CISA KEV catalog. Exploitation requires local access coupled with high‑privileged rights, so it is most relevant to environments where an attacker can use a compromised account or a service running with elevated rights. If triggered, the attacker can execute arbitrary commands with system privileges, potentially controlling, destroying or exfiltrating data.