Dell CSM 1.17.0 and earlier expose Kubernetes nodes to root via five unauthenticated auth bypasses
Five CVEs in Dell CSM prior to 1.18.0 permit unauthenticated root on Kubernetes nodes and full storage admin takeover. Hard-coded credentials and missing auth checks affect all five Dell storage families with no mitigations except immediate patching and secret rotation. Operators managing Dell-backed clusters face an all-or-nothing exposure that prior exploited Dell driver flaws suggest will be targeted quickly.
Kubernetes operators must treat the update as a break-glass event. Because the authorization proxy sits in the control plane path, any unpatched cluster allows an attacker who reaches the node network to bypass both Dell and Kubernetes RBAC simultaneously. No independent technical attribution of prior Dell driver exploits has been published; the same evidentiary gap will recur if these CVEs are weaponized.
Dell: fewer than 40 percent of CSM clusters will reach 1.18.0 within 45 days based on historical patch telemetry for similar driver releases.
Sources (3)
- [1]Dell Container Storage Modules Security Advisory(https://www.dell.com/support/security/en-us)
- [2]NIST NVD CVE-2026-63688 Entry(https://nvd.nist.gov/vuln/detail/CVE-2026-63688)
- [3]The Hacker News Dell CSM Disclosure(https://thehackernews.com/2026/10/dell-csm-flaws-enable-unauthenticated.html)