Dell CSM flaws expose storage arrays and Kubernetes clusters to attackers

Feeds.4Sysops •IT News • October 2, 2026

Dell says customers should upgrade Container Storage Modules (CSM) to version 1.18.0 or later after fixing six critical vulnerabilities, including two rated CVSS 10. The flaws could let unauthenticated attackers take control of storage services, gain root on Kubernetes nodes, or read cluster Secrets. Source

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Dell Patches Critical CSM Flaws Allowing Unauthenticated Access Dell has issued security updates for six critical vulnerabilities in its Container Storage Modules (CSM) that could enable unauthenticated attackers to gain administrative access to storage backends and root control over Kubernetes clusters. The vulnerabilities, tracked as CVE-2026-63688 and CVE-2026-63692, both carry a maximum CVSS score of 10.0, allowing attackers to bypass authentication and access sensitive credentials. Additional vulnerabilities, CVE-2026-67269, CVE-2026-54472, CVE-2026-61421, and CVE-2026-67273, also pose significant risks, with CVSS scores ranging from 9.6 to 9.9. All versions prior to 1.17.0 are affected, and Dell recommends immediate upgrades to version 1.18.0 or later. Although Dell has not confirmed active exploitation, the potential impact on storage services and Kubernetes clusters is significant. Administrators are urged to rotate JWT signing secrets as part of the remediation process. 8 sources 61

Extracted Entities

Dell CSM flaws expose storage arrays and Kubernetes clusters to attackers

The full story

Extracted Entities

Attack Types (1)

CWE Weaknesses (3)

Platforms (1)