CVE-2026-67269
Awaiting Analysis Awaiting Analysis - Queue

Improper Privilege Management in Dell CSM Operator

Publication date: 2026-10-06

Last updated on: 2026-10-06

Assigner: Dell

Description
Dell Container Storage Modules (CSM) Operator, versions prior to 1.18.0 contains an Improper Privilege Management vulnerability in the ContainerStorageModule Custom Resource reconciler. A low privileged remote attacker could potentially exploit this vulnerability, leading to escalation of privileges and gaining root-level access on cluster nodes.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-06
Last Modified
2026-10-06
Generated
2026-10-06
AI Q&A
2026-10-06
EPSS Evaluated
N/A
NVD
CVE-2026-67269
EUVD
EUVD-2026-93432

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Dell Container Storage Modules (CSM) 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-269 The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

Dell Container Storage Modules (CSM) Operator before version 1.18.0 has an Improper Privilege Management flaw in its ContainerStorageModule Custom Resource reconciler. This allows a low-privileged remote attacker to escalate privileges and gain root access on cluster nodes.

Impact Analysis

An attacker could exploit this to take control of affected systems, install malware, steal data, or disrupt operations. Systems running vulnerable CSM Operator versions are at risk of full compromise.

Compliance Impact

This vulnerability could lead to unauthorized access, data breaches, or loss of sensitive information, violating GDPR, HIPAA, and other compliance requirements. Organizations must patch to avoid penalties and reputational damage.

Mitigation Strategies

Upgrade Dell Container Storage Modules (CSM) Operator to version 1.18.0 or later to address the improper privilege management vulnerability.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-67269. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart