CVE-2026-67269: Critical severity Dell Container Storage Modules (CSM) Operator vulnerability
Dell Container Storage Modules (CSM) Operator, versions prior to 1.18.0 contains an Improper Privilege Management vulnerability in the ContainerStorageModule Custom Resource reconciler. A low privileged remote attacker could potentially exploit this vulnerability, leading to escalation of privileges and gaining root-level access on cluster nodes.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Dell Container Storage Modules (CSM) Operatorto a version that resolves this vulnerability.Fixed in 1.18.0
Event History
Frequently Asked Questions
Which deployments are affected?
Dell Container Storage Modules (CSM) Operator versions earlier than 1.18.0 are affected. The issue is in the ContainerStorageModule Custom Resource reconciler.
What access does an attacker need to exploit this issue?
Exploitation requires low-privileged remote access. No user interaction is required, and successful exploitation could escalate privileges to root-level access on cluster nodes.
What is the remediation?
Upgrade Dell Container Storage Modules (CSM) Operator to version 1.18.0 or later. The provided data does not specify an alternative mitigation for environments that cannot immediately upgrade.