Dell CSM Flaws Enable Unauthenticated Admin Access and Root on Kubernetes Nodes

Dell's Container Storage Modules contained critical vulnerabilities that allowed unauthenticated attackers to bypass authentication, forge tokens, and manipulate Kubernetes RBAC controls — ultimately granting root-level access to cluster nodes. The root cause lies in insufficient authentication enforcement and improper privilege controls within a widely-deployed storage integration component. This is particularly dangerous because Kubernetes infrastructure often underpins mission-critical workloads, meaning a single compromised node can cascade into full cluster takeover. Organizations running unpatched CSM versions may have unknowingly exposed their entire storage and container infrastructure to remote attackers with no credentials required.