CVE-2025-46608

critical · 9.1

Dell Data Lakehouse, versions prior to 1.6.0.0, contain(s) an Improper Access Control vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges. This vulnerability is considered Critical, as it may result in unauthorized access with elevated privileges, compromising system integrity and customer data. Dell recommends customers upgrade to the latest version at the earliest opportunity.

9.1

CVSS

0.5%

EPSS (exploit prob.)

39th

EPSS percentile

2025-11-12

Published

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Weaknesses

CWE-284

Affected products

Vendor	Product	Affected versions
dell	data_lakehouse	< 1.6.0.0

Check a specific version with /api/v1/cve/match.

References

https://www.dell.com/support/kbdoc/en-us/000390529/dsa-2025-375-security-update-for-dell-data-lakehouse-multiple-vulnerabilities

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2025-46608