Is CVE-2025-32749 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2025-32749 being exploited in the wild.

How severe is CVE-2025-32749?

Medium severity, with a CVSS score of 5.3, published 22 May 2026.

Which products and versions are affected?

Dell PowerFlex Appliance < IC 48.383.00; Dell PowerFlex Manager <=4.6.2; Dell Powerflex Rack < 3.8.3.0.

Is there a fix for CVE-2025-32749?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2025-32749 attacked?

It is attacked with local access, in a network appliance.

Am I affected by CVE-2025-32749?

Check whether you run Dell PowerFlex Appliance, Dell PowerFlex Manager, Dell Powerflex Appliance Intelligent Catalog or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2025-32749: Dell PowerFlex Manager incorrect default permissions privilege escalation

Q: Is there a fix for CVE-2025-32749?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

Q: How is CVE-2025-32749 attacked?

It is attacked with local access, in a network appliance.

Q: Am I affected by CVE-2025-32749?

Check whether you run Dell PowerFlex Appliance, Dell PowerFlex Manager, Dell Powerflex Appliance Intelligent Catalog or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2025-32749 · Severity: medium · CVSS 5.3 · Published 2026-05-22

Dell PowerFlex Manager is a tool used to manage and automate storage infrastructure. A security flaw in this software allows a user with low-level access to the system to gain higher-level permissions than intended. This could allow an unauthorized individual to modify system settings or access restricted data, potentially compromising the integrity of the storage management environment.

Technologies: Dell PowerFlex Manager, Dell Powerflex Appliance Intelligent Catalog, Dell Powerflex Rack. Vendors: Dell.

Quick answers

Is CVE-2025-32749 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2025-32749 being exploited in the wild.
How severe is CVE-2025-32749?: Medium severity, with a CVSS score of 5.3, published 22 May 2026.
Which products and versions are affected?: Dell PowerFlex Appliance < IC 48.383.00; Dell PowerFlex Manager <=4.6.2; Dell Powerflex Rack < 3.8.3.0.
Is there a fix for CVE-2025-32749?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2025-32749 attacked?: It is attacked with local access, in a network appliance.
Am I affected by CVE-2025-32749?: Check whether you run Dell PowerFlex Appliance, Dell PowerFlex Manager, Dell Powerflex Appliance Intelligent Catalog or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

Dell PowerFlex Manager (versions 4.6.2 and prior) is vulnerable to an incorrect default permissions flaw (CWE-276). The vulnerability exists within the file system or component permissions of the management software. A local attacker with low-level privileges can exploit these weak permissions to modify files or execute processes with higher authority, leading to an elevation of privileges. The attack requires local access to the system but no user interaction. Dell has released security updates (DSA-2025-434 and DSA-2025-435) to address this issue in PowerFlex Appliance and Rack configurations.

Affected products

Dell PowerFlex Manager <=4.6.2
Dell PowerFlex Appliance < IC 48.383.00
Dell PowerFlex Rack < 3.8.3.0

Timeline

2026-05-22: disclosed
2026-05-22: advisory

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.