Dell Application Store Incorrect Permission Assignment Vulnerability

Dell Application Store versions prior to 26.05.0.7 contain an incorrect permission assignment vulnerability categorized as a critical resource access issue. This flaw resides within the application’s local handling of resource permissions. A local attacker possessing low-level system privileges can exploit this vulnerability to bypass intended access controls, resulting in the disclosure of sensitive information stored by or accessible to the application. Given that the Dell Application Store is a component integrated into various Dell systems, this flaw poses a risk to internal environments where local user access is shared or where non-administrative users are granted interactive login rights. Defenders should prioritize updating the Dell Application Store to version 26.05.0.7 or later to mitigate unauthorized access to local sensitive data.

Impact

Successful exploitation allows local, low-privileged users to read sensitive information that should be restricted, potentially leading to the compromise of credentials, configuration data, or private user information contained within the application's environment.

Recommendation

• Upgrade the Dell Application Store to version 26.05.0.7 or later across all managed endpoints to resolve CVE-2026-71169.
• Audit local file system permissions for directories associated with the Dell Application Store to ensure non-privileged users cannot access sensitive configuration files.
• Monitor for unauthorized access attempts to local application data stores by low-privileged user accounts.