Dell Container Storage Modules contain a missing authentication flaw in the csi‑powerflex, csi‑powermax, and csi‑powerstore components. The flaw, classified as CWE‑306, permits an unauthenticated attacker who can reach the modules from an adjacent network to read protected data, leading to information disclosure. No elevation of privilege or remote code execution is reported.

The vulnerability affects Dell Container Storage Modules running any version earlier than 1.18.0. Systems that deploy the csi‑powerflex, csi‑powermax, or csi‑powerstore modules are potentially compromised if they have not yet been updated.

The CVSS score of 5.4 places the issue in the medium severity range. Because the exploit requires an unauthenticated attacker with local or network‑adjacent access and there is no publicly available proof of concept, the overall risk is moderate. With EPSS data unavailable and the vulnerability not listed in CISA’s KEV catalog, the likelihood of exploitation appears limited, although the potential impact of information disclosure remains a concern.