The Dell Inventory Collector Client contains an unquoted search path or element flaw that allows a low‑privileged local user to execute arbitrary code. The defect enables the attacker to run unwanted programs with the system account and ultimately gain full control of the affected machine. This vulnerability is classified as a privilege‑escalation weakness and can compromise confidentiality, integrity, and availability of the computer.

Dell’s Inventory Collector Client for PCs Home and Business, in all releases older than version 15.0.0, is affected. The flaw resides in the client component that searches for executable files without quoting the path, making it vulnerable to local exploitation.

The CVSS score of 7.8 marks this as a high‑severed vulnerability. The EPSS score is not available, and the issue is not listed in the CISA KEV catalog, suggesting no widespread exploitation to date. However, the attack requires local access and only low privileges, making it relatively easy to execute on a compromised workstation. If a local attacker can gain even a standard user session, they can leverage this flaw to take full system control.