Dell iDRAC Tools versions before 11.4.1.0 contain an improper link resolution before file access vulnerability. This weakness allows a low‑privileged local attacker to direct the tool to follow a link that references another file path. As a result, the attacker could alter filesystem objects, leading to unauthorized modifications of configuration or system data, thereby compromising data integrity.

The vulnerability affects Dell iDRAC Tools, specifically all releases earlier than version 11.4.1.0. Users running these older builds may be exposed if they allow local users to interact with the tool.

The CVSS score of 6 indicates a moderate severity, but the lack of a publicly available exploit and the fact that it targets local low‑privileged users reduces the likelihood of widespread exploitation. The vulnerability is not listed in the CISA KEV catalog and no EPSS score is available. The attacker would need local access, making remote compromise unlikely without further local privilege escalation.