Critical Dell Data Lakehouse Flaw Allows Remote Attackers to Escalate Privileges

Dell Technologies has disclosed a critical vulnerability in its Data Lakehouse platform that could let attackers with high-level privileges escalate their access and compromise system integrity. The flaw, tracked as CVE-2025-46608, affects versions prior to 1.6.0.0, with a maximum CVSS score of 9.1, indicating an exceptionally high risk.

The vulnerability stems from an Improper Access Control issue and, according to Dell’s advisory, a highly privileged attacker with remote network access could exploit it to gain elevated privileges without user interaction. The remediation path is to upgrade to Dell Data Lakehouse version 1.6.0.0 or later as soon as possible, and Dell Technologies strongly encourages customers to prioritise this patching effort.

Organisations should inventory their deployments, monitor for high-privileged account activity, and implement the upgrade to eliminate this risk, as outlined in Dell’s security advisory DSA-2025-375.