{"id":"CVE-2026-91893","kind":"vulnerability","aliases":["CVE-2026-91893"],"related":[],"title":"Dell Alienware Command Center: local users can gain elevated privileges","description":"Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Privilege Management vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privilege.","summary":"Dell Alienware Command Center, before version 6.14.54.0, has an improper privilege management flaw. A low-privileged user with local access can exploit it to gain elevated privileges on the machine.","severity":"high","cvss":7.8,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["alienware","dell","other","windows"],"not_affected_if":["not-installed","patched-version"],"how_to_check":"- Check the installed Alienware Command Center version in the app's About screen or installed programs list; versions before `6.14.54.0` are affected.","fix":"- Move to Alienware Command Center `6.14.54.0` or later.","status":"open","published_at":"2026-11-02T20:18:03+00:00","first_seen_at":"2026-11-02T20:35:37+00:00","triaged_at":"2026-11-02T20:36:31+00:00","updated_at":"2026-11-02T20:36:31+00:00","category":"other","confidence":0.7,"triage":{"at":"2026-11-02T20:36:31Z","model":"claude-haiku-5-5","output":{"fix":"- Move to Alienware Command Center `6.14.54.0` or later.","reach":"local","title":"Dell Alienware Command Center: local users can gain elevated privileges","impact":"high","summary":"Dell Alienware Command Center, before version 6.14.54.0, has an improper privilege management flaw. A low-privileged user with local access can exploit it to gain elevated privileges on the machine.","audience":"everyone","category":"other","nicknames":[],"who_cares":["alienware","windows","dell"],"confidence":0.7,"fix_status":"available","needs_auth":"yes","worst_case":"local low-privileged user gains elevated system privileges","analyst_note":"","how_to_check":"- Check the installed Alienware Command Center version in the app's About screen or installed programs list; versions before `6.14.54.0` are affected.","plain_action":"Update Alienware Command Center to version 6.14.54.0 or later.","needs_analyst":false,"not_affected_if":["not-installed","patched-version"],"who_is_affected":"Alienware Command Center installs on Alienware PCs. The sources say a low-privileged attacker with local access can exploit it, so the exposure is limited to people who can already run code or log in on the machine. Machines without the app installed or running a version at or above 6.14.54.0 are not affected.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000658,"input_tokens":4118,"output_tokens":492,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-2026':12A,15A '-91893':13A,16A '6.14.54.0':27B,60C 'access':41B,73C 'alienwar':2A,17B,22B,53C 'attack':70C 'awcc':56C 'center':4A,24B,55C 'command':3A,23B,54C 'contain':61C 'could':74C 'cve':11A,14A 'dell':1A,18B,21B,52C 'elev':9A,47B,81C 'exploit':43B,76C 'flaw':33B 'gain':8A,46B 'improp':30B,63C 'lead':79C 'local':5A,40B,72C 'low':36B,68C 'low-privileg':35B 'machin':51B 'manag':32B,65C 'potenti':75C 'prior':58C 'privileg':10A,31B,37B,48B,64C,69C,83C 'user':6A,38B 'version':26B,57C 'vulner':66C,78C 'window':20B","nicknames":[],"mitigations":[],"who_affected":"Alienware Command Center installs on Alienware PCs. The sources say a low-privileged attacker with local access can exploit it, so the exposure is limited to people who can already run code or log in on the machine. Machines without the app installed or running a version at or above 6.14.54.0 are not affected.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"everyone","plain_action":"Update Alienware Command Center to version 6.14.54.0 or later.","pkeys":[],"ptokens":[],"labels":["alienware","dell","high","other","windows"],"first_public_at":"2026-11-02T20:18:03+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"security_alert@emc.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-91893","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91893","severity":null,"published_at":"2026-11-02T20:18:03+00:00","modified_at":"2026-11-02T20:18:03+00:00","first_seen_at":"2026-11-02T20:35:37+00:00","fetched_at":"2026-11-02T20:35:37+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}