CVE-2026-49810 describes an insertion of sensitive information into log files vulnerability in Dell Command Powershell Provider (DCPP) versions before 2.10.2. A local attacker with low privileges could exploit this vulnerability to cause information disclosure by inserting sensitive data into logs. The vulnerability is identified as CWE-532 and has a CVSS 3.1 base score of 7.8, indicating high impact on confidentiality, integrity, and availability.

The vulnerability allows a low privileged local attacker to cause information disclosure by inserting sensitive information into log files. This can compromise confidentiality and potentially affect integrity and availability of the system due to the high CVSS impact metrics.

A fix is available in Dell Command Powershell Provider version 2.10.2. Users should upgrade to version 2.10.2 or later to remediate this vulnerability. No vendor advisory content was provided to indicate alternative mitigations or if the issue is already mitigated in other ways.