CVE-2024-37129 is a path traversal vulnerability in Dell Inventory Collector before version 12.3.0.6. It allows a local authenticated malicious user to exploit improper pathname restrictions, potentially leading to arbitrary code execution on the affected system. The vulnerability requires local access with low privileges and user interaction. The CVSS v3.1 base score is 6.7 (AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H). No vendor advisory or patch information is currently available, and no known exploits in the wild have been reported.

Successful exploitation could allow a local authenticated attacker to execute arbitrary code with the privileges of the Dell Inventory Collector process, potentially compromising confidentiality, integrity, and availability of the affected system. The attack complexity is high and requires user interaction, limiting exploitability to some extent.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict local access to trusted users only and monitor for suspicious activity related to Dell Inventory Collector. Avoid running the software with elevated privileges if possible.