The vulnerability is caused by incorrect default permissions that allow a local user with high privileges to obtain further elevated rights. This can lead to arbitrary code execution, cause denial of service, and expose sensitive information. The weakness is identified as a privilege management flaw.

Dell PowerScale OneFS, versions prior to 9.10.1.6 and 9.11.0.0 through 9.12.0.1 are affected. These versions contain improper default permission settings that can be exploited by local attackers to gain elevated privileges.

The CVSS score of 6.7 indicates a moderate severity. The EPSS score is below 1% and the vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog, suggesting low current exploitation likelihood. The attack vector is local; an attacker must have local high‑privilege access to the OneFS system. By changing or abusing the default permissions, the attacker can run arbitrary code, cause service disruption, and potentially read or modify protected data.