CVE-2026-67269

Critical · CVSS 9.9

CVSS: 9.9; nvd
EPSS: —
KEV: No
Class: other; CWE-269

Description

Dell Container Storage Modules (CSM) Operator, versions prior to 1.18.0 contains an Improper Privilege Management vulnerability in the ContainerStorageModule Custom Resource reconciler. A low privileged remote attacker could potentially exploit this vulnerability, leading to escalation of privileges and gaining root-level access on cluster nodes.

References

https://www.dell.com/support/kbdoc/en-us/000515771/dsa-2026-448-security-update-for-dell-container-storage-modules-multiple-vulnerabilities?msockid=3021cac2195069ed3194ddad186a68f9

Status: profiled · ingested 2026-10-08T18:00:43.000Z