Dell Container Storage Modules: Template injection leads to privilege escalation
Summary
Dell Container Storage Modules (CSM) before version 1.18.0 contain an improper neutralization of special elements in a template engine (CWE-1336). A remote attacker with a low-privileged account can exploit this flaw to escalate privileges. The CVSS score is 9.6 (Critical) with scope change, but the vendor advisory provides little technical detail for this specific CVE.
Affected
- Dell Container Storage Modules prior to 1.18.0
- Verify exact version boundaries in Dell advisory DSA-2026-448, as some secondary sources report a different threshold.
Fixed in
- Upgrade to Dell Container Storage Modules 1.18.0 or later.
Workaround
- Unknown. Secondary sources report that Dell lists no workarounds; upgrading is the only fix.
Exploitation
- No known exploitation in the wild at the time of the reports reviewed.
- Not listed in CISA KEV according to OpenCVE; verify directly in the KEV catalogue.
- No public proof of concept found; status unknown.
- CISA SSVC: Exploitation none, Automatable no, Technical Impact total.
Our recommendation
- Identify any Dell CSM installations in your Kubernetes or OpenShift environments.
- Upgrade to version 1.18.0 or later, as no workaround exists.
- Rotate the JWT signing secret and storage array administrator credentials after upgrading.
- Review authorization component logs for unexplained administrative activity.
- Keep CSM authorization components away from public internet exposure.
Public exploits
PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.
Research sources
- Dell DSA-2026-448 Security Update for Dell Container Storage Modules www.dell.com
- University of Toronto security advisory on Dell CSM vulnerabilities security.utoronto.ca
- FieldEffect blog on Dell CSM vulnerabilities fieldeffect.com
- Health-ISAC bulletin on Dell CSM flaws (AHA PDF) www.aha.org
- OpenCVE CVE-2026-67273 app.opencve.io
Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 30 Oct 2026, 23:23.
Original description (NVD)
Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Improper Neutralization of Special Elements Used in a Template Engine vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.