Dell PowerScale OneFS contains an execution with unnecessary privileges flaw that allows a local attacker who already has high privilege to run code with elevated rights, potentially causing denial of service, escalating privileges, and exposing sensitive data. The weakness is a classic privilege‑bypass issue (CWE‑250).

The affected products are Dell PowerScale OneFS systems. Versions prior to 9.10.1.6 and those from 9.11.0.0 through 9.12.0.1 are vulnerable.

The CVSS score of 6.7 indicates moderate severity while the EPSS below 1% shows a low probability of exploitation at present. The vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog. Exploitation requires local access and a user with elevated privileges; an attacker can leverage this to interrupt services, gain further privileges, or read protected data. Because the attack vector is local, limiting privileged local access and applying the vendor’s patch are the most effective mitigations.