{"id":"CVE-2026-91894","kind":"vulnerability","aliases":["CVE-2026-91894"],"related":[],"title":"Dell Alienware Command Center: low-privilege local user can escalate privileges","description":"Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain a Least Privilege Violation vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privilege, Arbitrary Code Execution and Denial of Service.","summary":"Dell Alienware Command Center versions before 6.14.54.0 contain a least privilege violation. A local user with low privileges could escalate to higher privileges, run arbitrary code, or cause a denial of service.","severity":"medium","cvss":6.7,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["alienware","dell","other","windows"],"not_affected_if":["fixed-version","not-installed"],"how_to_check":"- Check the installed Alienware Command Center version in the app or Windows Apps list; compare with `6.14.54.0`","fix":"- Dell Alienware Command Center: `6.14.54.0` or later","status":"open","published_at":"2026-11-02T20:18:03+00:00","first_seen_at":"2026-11-02T20:35:37+00:00","triaged_at":"2026-11-02T20:36:35+00:00","updated_at":"2026-11-02T20:36:35+00:00","category":"other","confidence":0.6,"triage":{"at":"2026-11-02T20:36:35Z","model":"claude-haiku-5-5","output":{"fix":"- Dell Alienware Command Center: `6.14.54.0` or later","reach":"local","title":"Dell Alienware Command Center: low-privilege local user can escalate privileges","impact":"high","summary":"Dell Alienware Command Center versions before 6.14.54.0 contain a least privilege violation. A local user with low privileges could escalate to higher privileges, run arbitrary code, or cause a denial of service.","audience":"everyone","category":"other","nicknames":[],"who_cares":["alienware","windows","dell"],"confidence":0.6,"fix_status":"available","needs_auth":"yes","worst_case":"local user gains elevated privileges and runs arbitrary code","analyst_note":"","how_to_check":"- Check the installed Alienware Command Center version in the app or Windows Apps list; compare with `6.14.54.0`\n- unknown","plain_action":"Update Alienware Command Center to version 6.14.54.0 or later.","needs_analyst":false,"not_affected_if":["not-installed","fixed-version"],"who_is_affected":"Only machines running Alienware Command Center before 6.14.54.0 are affected, and the attacker must already have a local low-privilege account on the machine. Systems without the application installed, or already on 6.14.54.0 or later, can skip it.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000658,"input_tokens":4142,"output_tokens":487,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':14A,17A '-91894':15A,18A '6.14.54.0':29B,63C 'access':76C 'alienwar':2A,19B,24B,56C 'arbitrari':47B,87C 'attack':73C 'awcc':59C 'caus':50B 'center':4A,26B,58C 'code':48B,88C 'command':3A,25B,57C 'contain':30B,64C 'could':41B,77C 'cve':13A,16A 'dell':1A,20B,23B,55C 'denial':52B,91C 'elev':84C 'escal':11A,42B 'execut':89C 'exploit':79C 'higher':44B 'lead':82C 'least':32B,66C 'local':8A,36B,75C 'low':6A,39B,71C 'low-privileg':5A 'potenti':78C 'prior':61C 'privileg':7A,12A,33B,40B,45B,67C,72C,86C 'run':46B 'servic':54B,93C 'user':9A,37B 'version':27B,60C 'violat':34B,68C 'vulner':69C,81C 'window':22B","nicknames":[],"mitigations":[],"who_affected":"Only machines running Alienware Command Center before 6.14.54.0 are affected, and the attacker must already have a local low-privilege account on the machine. Systems without the application installed, or already on 6.14.54.0 or later, can skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"everyone","plain_action":"Update Alienware Command Center to version 6.14.54.0 or later.","pkeys":[],"ptokens":[],"labels":["alienware","dell","medium","other","windows"],"first_public_at":"2026-11-02T20:18:03+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss_by":"security_alert@emc.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-91894","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91894","severity":null,"published_at":"2026-11-02T20:18:03+00:00","modified_at":"2026-11-02T20:18:03+00:00","first_seen_at":"2026-11-02T20:35:37+00:00","fetched_at":"2026-11-02T20:35:37+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}