Dell CSM Flaws Enable Unauthenticated Admin Access and Root on Kubernetes Nodes

Dell has released security updates addressing multiple critical vulnerabilities in Dell Container Storage Modules (CSM). The most severe flaw, CVE-2026-63688, carries a CVSS score of 10.0 and involves a missing authentication vulnerability in the csm-authorization-storage gRPC server. These vulnerabilities could allow unauthenticated attackers to gain administrative access and achieve root-level privileges on Kubernetes nodes. The flaws represent a significant risk to organizations using Dell CSM in containerized environments. Dell has urged users to apply the security patches immediately to mitigate potential exploitation.