Skip to content
Sign in
7.1 High

CVE-2026-70411 Dell Container Storage Modules (CSM), versions prior to 1.18.0, contains a Missing Authentication for Critical…

Description

Dell Container Storage Modules (CSM), versions prior to 1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csm-authorization-tenant gRPC service (TenantService). An unauthenticated adjacent network attacker could potentially exploit this vulnerability, leading to unauthorized creation of tenant entities, cross-tenant role injection, and modification of storage access control flags.

Affected products and versions

Product Affected versions Fixed in
Container Storage Modules (CSM) Versions not published

Other CVEs of Container Storage Modules (CSM)

The 3 CVEs of Container Storage Modules (CSM) →
CVE-2026-67270 Dell Container Storage Modules (CSM) versions prior to 1.18.0, contains an Improper Certificate Validation vulnerability… 8.2 High CVE-2026-67269 Dell Container Storage Modules (CSM) Operator, versions prior to 1.18.0 contains an Improper Privilege Management… 9.9 Critical
Track this CVE