Dell Wyse Management Suite exposes a weakness that allows an attacker to supply untrusted information which is treated as trusted. The flaw can be leveraged by an attacker with low privileges who has remote access, and the successful exploitation grants the attacker arbitrary code execution on the server hosting the management suite. This is classified as a high‑impact vulnerability with potential for full system compromise.

All installations of Dell Wyse Management Suite with a version earlier than 5.5 HF1 are affected. The vulnerability is specific to the Dell Wyse Management Suite product and has not been reported for other Dell or third‑party applications.

The CVSS score of 9.8 marks the vulnerability as critical, and the unavailability of an EPSS score does not diminish the risk because the weakness can be abused without sophisticated prerequisites. The issue is not yet listed in the CISA KEV catalog, but the high severity and remote exploitation potential mean it should be treated with the same urgency as any other critical flaw. A low‑privileged attacker who can reach the WMS endpoints, such as through VPN or internal network exposure, could execute arbitrary code and potentially compromise the entire managed infrastructure.