Database/Control plane, storage & DevOps

Dell CloudLink (privilege escalation to database): A privileged user escalates laterally or reads the CloudLink

CVE-2025-46366Control plane, storage & DevOpscurated

Impact

A privileged user escalates laterally or reads the CloudLink database directly, obtaining confidential information - which for a KMS means key metadata and policy.

Who can reach it

Local high-privilege access on the appliance.

What to do

Upgrade CloudLink to 8.1.1 or later.

References

https://www.dell.com/support/kbdoc/en-us/000384363/dsa-2025-374-security-update-for-dell-cloudlink-multiple-security-vulnerabilities

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.