Listen to this Post
How the CVE Works
CVE-2025-26330 is an incorrect authorization flaw in Dell PowerScale OneFS (versions 9.4.0.0 to 9.10.0.1). An unauthenticated attacker with local access can exploit this vulnerability to regain access to the cluster using previously disabled user account privileges. The system fails to properly invalidate session tokens or authorization checks, allowing stale credentials to remain active. This bypasses intended access controls, enabling privilege escalation or unauthorized data access.
DailyCVE Form
Platform: Dell PowerScale OneFS
Version: 9.4.0.0 – 9.10.0.1
Vulnerability: Incorrect Authorization
Severity: Critical
Date: 07/15/2025
Prediction: Patch expected by 08/30/2025
What Undercode Say
Check OneFS version isi_version -a List active sessions isi auth sessions list Force session termination isi auth sessions terminate --all
How Exploit
1. Attacker gains local access.
2. Uses cached credentials.
3. Bypasses disabled account checks.
Protection from this CVE
1. Apply vendor patch.
2. Enforce session expiration.
3. Monitor auth logs.
Impact
1. Unauthorized data access.
2. Privilege escalation.
3. Compliance violations.
Sources:
Reported By: nvd.nist.gov
Extra Source Hub:
Undercode
