Dell releases fixes for storage flaws that could expose administrator access

Dell released security update DSA-2026-448 for Container Storage Modules vulnerabilities that could let unauthenticated remote attackers gain administrative control of storage environments, Cybersecurity News reported. Dell recommends upgrading affected deployments to version 1.18.0 or later and says no workarounds or mitigations are available. Two flaws rated CVSS 10.0 affect CSM Authorization version 2.4.0. Missing authentication could expose administrator credentials for registered storage arrays or allow attackers to reach administrative functions across tenants. A separate credentials flaw could enable forged administrative tokens. Dell advises rotating token-signing secrets after updating; deployments using an unchanged signing secret from older documentation may remain exposed.