CVE-2026-44269 is an improper link resolution before file access ('link following') vulnerability in Dell PowerProtect Data Domain. It affects versions >=7.7.1.0 <8.7, >=8.6.1.0 <=8.6.1.10, >=8.3.1.0 <=8.3.1.30, and >=7.13.1.0 <=7.13.1.70. The flaw allows a high privileged attacker with local access to potentially gain unauthorized access by exploiting how symbolic links or similar references are resolved before file access. The CVSS 3.1 vector indicates local attack vector, low attack complexity, high privileges required, no user interaction, unchanged scope, high confidentiality impact, and no integrity or availability impact. No vendor advisory or patch information is currently available.

The vulnerability could allow a high privileged local attacker to access files or data they should not be authorized to access, impacting confidentiality. There is no impact on integrity or availability. Exploitation requires local access and high privileges, limiting the attack surface to trusted users or processes with elevated rights.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict local access to trusted users only and monitor for suspicious activity involving file link resolution. Avoid running untrusted code with high privileges on affected versions.