Dell Device Management Agent prior to version 26.05 contains an Improper Link Resolution flaw, classified as CWE-59, that can be triggered by following a symbolic link outside the intended access scope. This misuse of file system links can allow a local user with limited rights to read or write files beyond their normal boundary, potentially enabling an attacker to gain higher system privileges.

The defect is present in Dell Device Management Agent installations where the product version is earlier than 26.05. These agents are deployed on host systems as part of Dell's monitoring and management suite.

The CVSS score of 7.3 signals a high severity risk. The EPSS value of less than 1% indicates an extremely low probability that this vulnerability is actively exploited in the wild. Based on the description, the likely attack vector is local access with basic user privileges; the attacker would need to be able to place a malicious link prior to file access to trigger the flaw. Although the vulnerability is not currently listed in CISA's KEV catalog, organizations should treat it as a medium‑risk issue because local privilege escalation can lead to full control over the affected machine.