Dell CSM Flaws Enable Unauthenticated Admin Access and Root on Kubernetes Nodes

Dell has released security updates to address critical security flaws in Dell Container Storage Modules. The vulnerabilities could be exploited to take over susceptible systems. One of the flaws is a missing authentication vulnerability in the csm-authorization-storage gRPC server, identified as CVE-2026-63688, with a CVSS score of 10.0. This vulnerability could enable unauthenticated admin access and root access on Kubernetes nodes. The flaws in Dell CSM could be exploited by bad actors to gain control of vulnerable systems.