Container Storage Modules CVE-2026-63689

Exploitation requires an attacker to already possess a low-privileged authenticated account (PR:L) within the environment running Dell Container Storage Modules and to have read access to the log files that the modules generate; the vulnerability is the module writing sensitive information into those logs (CWE-532). Limiting factors: this is not a default-configuration unauthenticated flaw - the attacker needs a valid foothold and log visibility, no user interaction is required (UI:N), and impact is confined to disclosure of whatever sensitive data lands in the logs (confidentiality only, no integrity or availability effect). Affected versions are those prior to 1.18.0.

This is a moderate, not top-tier, priority. The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, base 6.5) describes a network-reachable, low-complexity flaw that nonetheless requires existing low-level privileges (PR:L) and yields only confidentiality impact (C:H, with no integrity or availability effect) - consistent with CWE-532, where sensitive data (likely credentials, tokens, or configuration secrets) is written to log files readable by an already-authenticated low-privileged user. No EPSS score, KEV listing, or SSVC decision data was supplied, and no public exploit is identified, so there is no signal of active or probable exploitation; the risk is therefore driven by the vendor's CVSS alone. The 'remote' and C:H framing could overstate real-world urgency because exploitation presupposes an attacker who already holds a low-privileged account on the cluster/platform and can read the logs - a meaningful precondition the raw score does not foreground. No conflicting signals were found between the vector and the description (both agree on authenticated, confidentiality-only disclosure), but EPSS, KEV, SSVC, and POC status are all MISSING from the input and should be checked against CISA KEV and the Dell advisory before final prioritization.

An attacker who already holds a low-privileged account on a Kubernetes environment running Dell Container Storage Modules reads module-generated log files and recovers sensitive information (such as credentials or secrets) that the software inadvertently wrote in cleartext. No public exploit code is identified; given AV:N/AC:L, exploitation is technically simple once log read access is obtained, but it depends on the attacker first having a valid low-privileged foothold.