# CVE-2025-45378: Dell CloudLink, versions 8.0 through 8.1.2, contain vulnerability on restricted shell. A Privileged user with known…

Source: https://junglewise.ai/threats/cve-2025-45378-dell-cloudlink-versions-8-0-through-8-1-2-contain-vulnerability  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2025-11-05  
License: CC BY 4.0 with a link back

CVE-2025-45378 · Severity: critical · CVSS 9.1 · Published 2025-11-05

Dell CloudLink, versions 8.0 through 8.1.2, contain vulnerability on restricted shell. A Privileged user with known password can break into command shell of CloudLink server and gain access of shell and escalate privilege, gain unauthorized access of system.

If ssh is enabled with web credentials of server, attack is possible through network with known privileged user/password.

Technologies: [Dell Cloudlink](https://junglewise.ai/threats/technologies/cloudlink). Vendors: [Dell](https://junglewise.ai/threats/vendors/dell).

## Quick answers

**Is CVE-2025-45378 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2025-45378 being exploited in the wild.

**How severe is CVE-2025-45378?** Critical severity, with a CVSS score of 9.1, published 5 November 2025.

**Which products and versions are affected?** Dell Cloudlink. The advisory does not name versions.

**Is there a fix for CVE-2025-45378?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2025-45378?** Check whether you run Dell Cloudlink. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- Dell Cloudlink

## Related threats

- [Dell CloudLink, versions prior to 8.2, contain use of a Cryptographic Primitive with a Risky Implementation…](https://junglewise.ai/threats/cve-2025-46424-dell-cloudlink-versions-prior-to-8-2-contain-use-of-a)
- [Dell CloudLink, versions prior to 8.1.1, contain a vulnerability where a privileged user may exploit and gain parallel…](https://junglewise.ai/threats/cve-2025-46366-dell-cloudlink-versions-prior-to-8-1-1-contain-a-vulnerability)
- [Dell CloudLink, versions prior 8.1.1, contain a Command Injection vulnerability which can be exploited by an…](https://junglewise.ai/threats/cve-2025-46365-dell-cloudlink-versions-prior-8-1-1-contain-a-command-injection)
- [Dell CloudLink, versions prior to 8.1.1, contain a vulnerability where a privileged user with known password can run…](https://junglewise.ai/threats/cve-2025-46364-dell-cloudlink-versions-prior-to-8-1-1-contain-a-vulnerability)
- [Dell CloudLink, versions prior to 8.2, contain a vulnerability where a privileged user with known password can run…](https://junglewise.ai/threats/cve-2025-45379-dell-cloudlink-versions-prior-to-8-2-contain-a-vulnerability)