Dell/Alienware Purchased Apps versions prior to 1.1.32.0 contain an Improper Link Resolution Before File Access (Link Following) flaw. A low‑privileged user with local access could craft a malformed link that the application resolves to an arbitrary target, resulting in a writable file location of the attacker’s choosing. The impact is the ability to overwrite or create files, potentially compromising the application or the host system.

The vulnerability affects Dell’s Alienware Purchased Apps software released before version 1.1.32.0. No specific hardware or operating system constraints are listed, so the issue applies to any deployment of those software versions.

The CVSS score of 6.3 indicates moderate severity. The EPSS score is unavailable, so the likelihood of exploitation is unknown, but the issue is not listed in CISA’s KEV catalog. The attack vector is inferred to be local because the description states a low‑privileged attacker with local access can exploit it. To exploit the flaw, the attacker must create a link that bypasses proper resolution checks and write to a target file, which requires the application’s write permissions. No publicly known exploit is documented.