Dell PowerPath Privilege Escalation Vulnerability (CVE-2026-32802) Advisory

Vulnerability Overview Vulnerability ID: CVE-2026-32802 Description: An improper permissions vulnerability exists in Dell PowerPath versions 7.2 through 8.0 SP1. A low-privilege attacker with local access can potentially exploit this vulnerability to achieve privilege escalation. CVSS Base Score: 5.3 CVSS Vector String: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L Affected Products Affected Product: Dell PowerPath for Windows Affected Versions: Versions 7.2 through 8.0 SP1 Remediation Fixed Version: 8.0 SP2 Remediation Link: Dell PowerPath for Windows Drivers Additional Information Publication Date: 2026-08-18 Initial Release: 2026-08-18 Acknowledgments: Dell thanks falconCorrup for reporting this issue. Legal Disclaimer Dell Technologies security bulletins should be read and used to help avoid situations that may arise from the issues described. Dell Technologies distributes security bulletins to bring attention to security information about affected products. Dell Technologies assesses risk based on the diverse set of installed systems, which may not reflect the actual risk to local installations and individual environments. All users are advised to determine the applicability of this information to their individual environments and to take appropriate action. This information is provided "as is" without any warranty. Dell Technologies disclaims all warranties, whether express or implied, including warranties of merchantability, fitness for a particular purpose, and non-infringement. In no event shall Dell Technologies, its affiliates, or suppliers be liable for any damages arising from the use or inability to use this information, including direct, indirect, incidental, consequential, loss of business profits, or special damages, even if Dell Technologies, its affiliates, or suppliers have been advised of the possibility of such damages. Some jurisdictions do not allow the exclusion or limitation of liability for consequential or incidental damages, so such limitations may apply to the extent permitted by law. Feedback Accuracy: Users can rate the accuracy of the article. Usefulness: Users can rate the usefulness of the article. Comprehensibility: Users can rate how easy the article is to understand. Helpfulness: Users can select "Yes" or "No" regarding whether the article was helpful. Additional Information: Users can provide additional feedback. Footer Information Account: My Account, Order Status, Profile Settings, My Products, Payments, Dell Rewards Balance Support: Support Home, Contact Technical Support, Returns Contact Us: Community, Contact Us, X (Twitter), LinkedIn, Instagram, YouTube Our Services: Artificial Intelligence, Products, Solutions, Services, Deals Our Company: Who We Are, Careers, Dell Technologies Capital, Investors, Newsroom, Recycling, Corporate Impact, Customer Stories Our Partners: Find a Partner, Find a Dealer, OEM Solutions, Partner Program Resources: Blog, Dell Rewards, Events, Email Registration, Featured Product Collections, Privacy Center, Security & Trust Center, Trial Software Downloads Copyright Information Copyright: © 2026 Dell Inc. Terms: Terms of Sale, Privacy Statement, My Privacy Choices, Cookies, Advertising and Email, Legal & Regulatory Accessibility: Anti-Slavery, Trafficking in Persons and Child Labor

Goal Reached Thanks to every supporter — we hit 100%!

Dell PowerPath Privilege Escalation Vulnerability (CVE-2026-32802) Advisory