Dell Application Installer versions prior to 26.09.0.1 store sensitive data without encryption. An unauthenticated local attacker could read or tamper with that data, leading to a loss of confidentiality and potential misuse of application credentials or configuration information. The vulnerability does not provide a direct exploit path to remote code execution but enables the attacker to gain unauthorized access to artifacts persisted by the installer.

The flaw affects Dell Application Installer products running any version earlier than 26.09.0.1. Systems using the Dell Application Installer should examine the installed version and update if the version is out of date.

The CVSS score is 6.2, indicating a moderate severity. The EPSS score is not available, and the issue is not listed in the CISA KEV catalog. The known attack vector requires local system access; the attacker does not need network connectivity or valid credentials. Because the vulnerability permits unauthorized local access to sensitive data, the risk is significant for environments where the installer stores confidential information and where local access is not tightly controlled.