CVE-2025-45376: 
Dell Repository Manager vulnerability analysis and mitigation

CVE-2025-45376 is a privilege escalation vulnerability in Dell Repository Manager (DRM) caused by improper handling of insufficient permissions or privileges (CWE-280). It affects DRM versions 3.4.7 and 3.4.8, and was published on September 29, 2025. A low-privileged local attacker can exploit this flaw to elevate their privileges on the affected system. The vulnerability carries a CVSS v3.1 base score of 7.8 (High) (Dell Advisory).

The root cause is classified as CWE-280 (Improper Handling of Insufficient Permissions or Privileges), meaning the application fails to properly enforce permission checks in certain code paths, allowing a lower-privileged user to perform actions that should require elevated rights. The attack vector is local, requires low privileges, low attack complexity, and no user interaction, making it straightforward for any authenticated local user to attempt exploitation. No public technical write-ups or proof-of-concept code have been identified at this time (Dell Advisory).

Successful exploitation allows a low-privileged local attacker to escalate their privileges within Dell Repository Manager, potentially gaining unauthorized access to sensitive system resources. The CVSS scoring reflects high impacts to confidentiality, integrity, and availability, meaning an attacker could read sensitive data, modify system configurations, or disrupt the availability of the DRM service. This could serve as a stepping stone for broader compromise of the host system if DRM is running with elevated service account privileges (Dell Advisory).

There is no public proof-of-concept exploit available, and no evidence of in-the-wild exploitation has been reported as of the time of this report. The EPSS score is approximately 0.01% (0.000100), indicating a very low probability of exploitation in the near term. The vulnerability has not been added to the CISA Known Exploited Vulnerabilities (KEV) catalog. No threat actor attribution has been identified (Dell Advisory).

Dell has released a patch addressing this vulnerability; users should upgrade Dell Repository Manager to version 3.4.9 or later, which is confirmed to be unaffected. In addition to patching, organizations should enforce the principle of least privilege by restricting local access to DRM installations and monitoring for suspicious local user activity. No specific workaround is documented as a substitute for the patch (Dell Advisory).