EUVD-2026-29043
GHSA-gm85-wrgm-h2qc
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessGain high-privilege local access
-
DeliveryIdentify privilege management flaw
-
ExploitExecute escalation payload
-
ExecutionBypass privilege boundaries
-
ImpactAchieve unrestricted system access
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A06:2025 - Insecure Design
ASVS 5.0
V8 - Authorization Least privilege enforcement
MITRE ATT&CK
1 technique across 1 tactic: Privilege Escalation The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | A high-privileged local user or administrator account on the Dell ECS or ObjectScale system is required. Exploitation is limited to local attack surface (AV:L) - remote exploitation is not feasible. The attacker must already possess administrative or high-privilege OS-level access to the affected host; unauthenticated or unprivileged local users cannot trigger this vulnerability based on the PR:H requirement. The flaw does not require user interaction (UI:N). No special configuration or non-default deployment mode is documented. |
| Impact | CVSS 6.7 reflects the vulnerability's local attack vector (AV:L), low complexity (AC:L), and high privilege requirement (PR:H), which together limit immediate real-world exposure compared to network-accessible flaws. However, the impact is severe: confidentiality, integrity, and availability are all high (C:H/I:H/A:H), meaning successful exploitation grants full system compromise. The high-privilege requirement (PR:H) is the primary limiting factor - attackers must already possess administrative or system-level access to trigger the flaw. This scenario is credible in multi-tenant enterprise environments where storage admins, privileged service accounts, or compromised admin credentials could be leveraged by insider threats or post-compromise lateral movement. The lack of public exploit code and absence of CISA KEV listing suggest limited incentive for mass exploitation, but the severity of impact (full confidentiality, integrity, and availability compromise) means this warrants immediate patching in production environments, especially if admin access controls are weak or admin credentials have been disclosed. |
| Exploit ScenarioDerived | An attacker gains administrative or system-level access to a Dell ECS or ObjectScale host through compromised credentials or insider access. The attacker then executes a local exploit that leverages the improper privilege management flaw to escalate privileges beyond their current level, potentially gaining kernel-level or unrestricted access. This allows the attacker to exfiltrate sensitive data, modify stored objects, or disable the storage service. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – May 11, 2026
Improper privilege management in Dell ECS 3.8.1.0-3.8.1.7 and ObjectScale prior to 4.3.0.0 allows high-privileged local attackers to escalate privileges and gain full system access, affecting confidentiality, integrity, and availability. No public exploit code or active exploitation has been identified at the time of analysis.
RemediationAI
For Dell ObjectScale, upgrade to version 4.3.0.0 or later - the patch version confirmed in Dell's advisory. For Dell ECS, apply the security update referenced in Dell Security Advisory DSA-2026-047 (https://www.dell.com/support/kbdoc/en-us/000462117/dsa-2026-047-security-update-for-dell-ecs-and-objectscale-multiple-vulnerabilities-1). If patching is not immediately feasible, restrict administrative access to ECS and ObjectScale systems to only essential personnel, implement robust authentication mechanisms (multi-factor authentication for admin accounts), and monitor privileged account activity and privilege escalation attempts through OS-level auditing. These compensating controls reduce exposure but do not eliminate the vulnerability - they are temporary measures pending patch deployment.
Affected VersionsENISA
Affects your stack
Find out whether the stacks and servers you run are on an affected version.
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
Dell ECS (Elastic Cloud Storage) and ObjectScale are enterprise object storage platforms. The vulnerability stems from improper privilege management (CWE-269) in the operating system layer, a root-cause classification indicating insufficient controls over privilege assignment, delegation, or verification. The local attack vector combined with high privilege requirement suggests the flaw exists in a privileged service or kernel component that processes requests from high-privileged system accounts or administrators. Attackers who have already achieved high-privilege status on the host OS can exploit this flaw to escalate further or gain unintended capabilities, potentially bypassing intended privilege boundaries within the storage system.
Know when Ecs gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Primary rating from Vendor (dell) · only source for this CVE.
CVSS VectorVendor: dell
Lifecycle Timeline
2DescriptionCVE.org
Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains an improper privilege management vulnerability in the OS. A high privileged attacker with local access could potentially exploit this vulnerability, leading to elevation of privileges.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Privilege escalation occurs when an attacker leverages flaws in access control mechanisms to gain permissions beyond what they were originally granted.
Missing authorization checks in the ECS WordPress plugin before 4.3.10 allow any contributor-level or higher user to rea
CSV formula injection in Dell ECS 3.8.1.0 through 3.8.1.7 and in Dell ObjectScale versions prior to 4.3.0.0 allows remot
Hard-coded credentials in Dell ECS 3.8.1.0-3.8.1.7 and ObjectScale <4.3.0.0 allow unauthenticated filesystem access. Des
Broken access control in the Identity and Access Management (IAM) module of Dell ECS (Elastic Cloud Storage) 3.5 and 3.6
Local privilege escalation in Dell ECS 3.8.1.0 through 3.8.1.7 and Dell ObjectScale prior to 4.4.0.0 allows an attacker
Authentication bypass in Dell ECS Geo replication (versions 3.8.1.0-3.8.1.7) and Dell ObjectScale (prior to 4.3.0.0) all
Exploit-DB