A high-severity privilege escalation vulnerability in Dell PowerStore allows authenticated users to bypass security restrictions and gain unauthorized elevated access.

The flaw is categorized as a Protection Mechanism Failure (CWE-693), which occurs when security controls are incorrectly implemented or bypassed. An attacker who has already authenticated with limited privileges can exploit this weakness to escalate their access to higher privilege levels within the system.

Successful exploitation of this vulnerability could lead to a complete compromise of the storage appliance, as the attacker gains unauthorized administrative control. This presents a significant risk to data confidentiality, integrity, and availability, as unauthorized users could modify configurations, access sensitive stored data, or disrupt storage services. With a CVSS score of 8.8, this vulnerability is classified as high severity and requires immediate attention to prevent internal abuse or lateral movement by compromised accounts.

Immediate Action: Update affected Dell PowerStore appliances to version 4.1.0.6-2771237 or later as specified in the Dell security advisory DSA-2026-330.

Proactive Monitoring: Audit system logs for unusual administrative activity, specifically focusing on privilege changes or unauthorized access attempts from low-privileged user accounts.

Compensating Controls: Ensure strict adherence to the principle of least privilege by limiting the number of users with platform access and using multi-factor authentication where supported.

Public Exploit Available: No (exploit_available: false)

Given the severity of this privilege escalation flaw, administrators should prioritize the deployment of the vendor-provided patch. Failure to remediate this vulnerability leaves the storage environment exposed to unauthorized administrative control by potentially malicious or compromised internal users. Ensure all PowerStore management interfaces are isolated from public networks while the update process is scheduled and completed.