CVE-2026-70411 Dell Container Storage Modules (CSM), versions prior to 1.18.0, contains a Missing Authentication for Critical Function vulnerability in the

What is CVE-2026-70411?

CVE-2026-70411 is a high-severity vulnerability in Dell Container Storage Modules (CSM), published on 6 Oct 2026.

Official description

Dell Container Storage Modules (CSM), versions prior to 1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csm-authorization-tenant gRPC service (TenantService). An unauthenticated adjacent network attacker could potentially exploit this vulnerability, leading to unauthorized creation of tenant entities, cross-tenant role injection, and modification of storage access control flags.

Weakness: CWE-306

Which versions are affected by CVE-2026-70411?

It affects 1 product.

Products include Dell Container Storage Modules.

How do I fix CVE-2026-70411?

No fix has been published for CVE-2026-70411 yet. Limit exposure of the affected software until one is available.

Is CVE-2026-70411 being exploited?

There is no known exploitation of CVE-2026-70411 in the wild and no public exploit code.

Other vulnerabilities in Dell Container Storage Modules (CSM)

• CVE-2026-63688 Missing authorization in Dell Container Storage Modules (CSM) Critical 10.0
• CVE-2026-63692 Missing authorization in Container Storage Modules Critical 10.0
• CVE-2026-67269 Privilege escalation in Container Storage Modules (CSM) Critical 9.9
• CVE-2026-54472 Hardcoded credentials in Container Storage Modules Critical 9.8
• CVE-2026-61421 Hardcoded credentials in Container Storage Modules Critical 9.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-mv3c-r45j-34f2.