CVE-2025-32746 is an insecure storage vulnerability (CWE-922) affecting Dell PowerFlex Manager (Appliance) versions up to 4.6.2. It allows an unauthenticated attacker who has local access to the system to potentially access sensitive information improperly stored by the appliance. The vulnerability does not require privileges or user interaction and impacts confidentiality only, with no impact on integrity or availability. The CVSS v3.1 base score is 4.0, reflecting a medium severity level. No official patch or remediation level has been published by Dell as of the current data.

An attacker with local access but no authentication privileges could exploit this vulnerability to access sensitive information stored insecurely on the affected Dell PowerFlex Manager appliance. This could lead to unauthorized disclosure of confidential data. There is no indication of impact on system integrity or availability. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict local access to trusted personnel only and monitor for any suspicious activity. Avoid exposing the appliance to untrusted users locally. Follow Dell's official communications for updates on patches or mitigations.