This vulnerability arises from an incorrect permission assignment to a critical resource in Dell PowerScale OneFS. Because of this misconfiguration, an attacker who has local, low‑privileged access could manipulate the permissions to trigger a denial of service condition. The flaw does not provide remote code execution or data exfiltration but can disrupt services by rendering a critical resource unavailable.

The affected products are Dell PowerScale OneFS across multiple releases. Versions 9.5.0.0 through 9.5.1.5, 9.6.0.0 through 9.7.1.10, 9.8.0.0 through 9.10.1.3, and the 9.11.x series up to but not including 9.13.0.0 are listed as vulnerable.

The CVSS score of 5.0 places this vulnerability in the medium severity range. The EPSS score is listed as less than 1 %, indicating a very low probability of exploitation in the wild. On the surface, an attacker would need local, low‑privileged access to the system, which limits the attack surface to insiders or compromised local accounts. While the risk is not catastrophic, the potential denial of service could impact business continuity if the critical resource is tied to live services. The vulnerability is not currently catalogued in the CISA Known Exploited Vulnerabilities list, so there is no known public exploit. Nonetheless, the medium CVSS score and incorrect permission assignment warrant timely remediation.