Patchfirst
CVE-2026-67269 Critical · 9.9 EPSS 0.3%

Dell Container Storage Modules (CSM) Operator, versions prior to 1.18.0 contains an Improper Privilege Management…

Dell · Container Storage Modules (CSM)

Summary

Dell Container Storage Modules (CSM) Operator, prior to version 1.18.0, contains an improper privilege management flaw in the ContainerStorageModule Custom Resource reconciler. A low-privileged remote attacker could potentially exploit this flaw to escalate privileges and gain root-level access on cluster nodes, with no user interaction required.

Official description · NVD

Dell Container Storage Modules (CSM) Operator, versions prior to 1.18.0 contains an Improper Privilege Management vulnerability in the ContainerStorageModule Custom Resource reconciler. A low privileged remote attacker could potentially exploit this vulnerability, leading to escalation of privileges and gaining root-level access on cluster nodes.

Breakdown
14.7 / 100
Exploited
Not confirmed
Reports
0
Tactics
0/15

Disclosed on 6 Oct 2026. No public exploit code or confirmed exploitation is recorded.

techniques

No techniques linked

No ATT&CK techniques are linked to this CVE yet. MITRE CTID has not mapped it, and no report passage in the corpus ties it to a technique.

What security researchers reported

Not named in any threat report yet

Also mentioned in 11 community threat pulses (AlienVault OTX)

Weaker evidence

Pulses are indicator collections that anyone can publish. A mention is not confirmation of exploitation.

References

1 link, grouped by NVD tag
↑ ↓ chooseEnter openEsc close