CVE-2026-53477 is a TOCTOU race condition vulnerability in Dell Command Update (DCU) prior to version 5.7.1. This vulnerability arises when the software performs a check on a resource and then uses that resource without ensuring it has not changed in the interim, allowing a local attacker with low privileges to exploit the timing window to gain elevated privileges. The vulnerability has a CVSS 3.1 score of 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), indicating it requires local access with low privileges and no user interaction, and can lead to high impact on confidentiality, integrity, and availability. No vendor advisory or patch information is currently available to confirm remediation status.

A low privileged local attacker could exploit this TOCTOU race condition to elevate their privileges on the affected system, potentially gaining administrative rights. This could lead to full system compromise including unauthorized access, modification, or disruption of system resources.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict local access to trusted users only and monitor for suspicious activity related to Dell Command Update. Avoid running DCU with elevated privileges where possible.