CVE-2026-41121 is an improper link resolution vulnerability (CWE-59) in Dell Device Management Agent versions before 26.05. This vulnerability allows a low privileged attacker with local access to exploit the improper handling of symbolic links before file access, potentially leading to elevation of privileges. The vulnerability has a CVSS 3.1 base score of 7.3 (AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H), reflecting high impact on confidentiality, integrity, and availability. No patch or official remediation level has been published by Dell as of the current data.

A local attacker with low privileges could exploit this vulnerability to gain elevated privileges on the affected system. This could lead to full compromise of confidentiality, integrity, and availability of the system running the vulnerable Dell Device Management Agent. The vulnerability requires local access and user interaction (UI:R), but the impact is high if successfully exploited.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict local access to trusted users only and monitor for suspicious activity related to the Dell Device Management Agent. Avoid running the agent with unnecessary elevated privileges if possible.