{"id":"CVE-2026-103813","kind":"vulnerability","aliases":["CVE-2026-103813"],"related":[],"title":"Dell PowerStore: OS command injection lets a limited user reach root","description":"Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability, potentially leading to privilege escalation to root on the appliance.","summary":"Dell PowerStore storage appliances contain an OS command injection flaw. An authenticated user with limited privileges can potentially escalate to root on the appliance.","severity":"critical","cvss":9.1,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"PowerStore T OS","fixed":["5.1.0.0-2798105"],"affected":"< 5.1.0.0-2798105","ecosystem":"vendor"}],"ecosystems":[],"tags":["dell-powerstore","infrastructure","self-hosted","storage"],"not_affected_if":["auth-required","no-powerstore-appliance"],"how_to_check":"Check the PowerStore T OS release (PowerStore Manager > Settings > Software, or the appliance software version). Versions prior to 5.1.0.0-2798105 are affected. Also review which accounts have limited-privilege management access and restrict management interfaces to trusted admin networks.","fix":"Upgrade PowerStore T OS to 5.1.0.0-2798105 or later (per-model download on Dell support).","status":"open","published_at":"2026-11-13T16:17:21+00:00","first_seen_at":"2026-11-13T16:47:32+00:00","triaged_at":"2026-11-13T16:48:14+00:00","updated_at":"2026-11-13T16:49:39+00:00","category":"infrastructure","confidence":0.8,"triage":{"at":"2026-11-13T16:48:14Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Dell PowerStore: OS command injection lets a limited user reach root","impact":"high","summary":"Dell PowerStore storage appliances contain an OS command injection flaw. An authenticated user with limited privileges can potentially escalate to root on the appliance.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["dell-powerstore","storage"],"confidence":0.6,"fix_status":"unknown","needs_auth":"yes","worst_case":"Limited user gains root on the storage appliance","analyst_note":"Find Dell's advisory for CVE-2026-103813 to get affected and fixed PowerStore releases and any setting to change.","how_to_check":"- Confirm whether a PowerStore appliance is in your environment and which software release it runs, per Dell's advisory.\n- Review which accounts hold limited-privilege access to the appliance's management interface.","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["no-powerstore-appliance"],"who_is_affected":"Organizations running Dell PowerStore storage appliances where users hold limited-privilege accounts. The sources do not state the affected releases or whether a default configuration is exposed. unknown","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"critical"},"cost_usd":0.000684,"input_tokens":4509,"output_tokens":467,"severity_before":"critical"},"analyst_status":"done","analyst_note":"Find Dell's advisory for CVE-2026-103813 to get affected and fixed PowerStore releases and any setting to change.","search":"'-103813':14A,17A '-2026':13A,16A 'applianc':32B,52B,81C 'authent':40B,62C 'command':4A,36B,58C 'contain':33B,55C 'could':67C 'cve':12A,15A 'dell':1A,22B,29B,53C 'dell-powerstor':21B 'escal':47B,76C 'exploit':69C 'flaw':38B 'host':27B 'infrastructur':24B 'inject':5A,37B,59C 'lead':73C 'let':6A 'limit':8A,43B,65C 'os':3A,20A,35B,57C 'potenti':46B,68C,72C 'powerstor':2A,23B,30B,54C 'powerstore':18A 'privileg':44B,66C,75C 'reach':10A 'root':11A,49B,78C 'self':26B 'self-host':25B 'storag':28B,31B 't':19A 'user':9A,41B,63C 'vulner':60C,71C","nicknames":[],"mitigations":[],"who_affected":"Dell PowerStore T appliances (500T, 1000T, 1200T, 1500, 3000T, 3200Q, 3200T, 5000T, 5200Q, 5200T, 5500, 7000T, 9000T, 9200T, 9500) running PowerStoreT OS earlier than 5.1.0.0-2798105. Exploitation needs an authenticated account with limited privileges on the appliance, which could then reach root. Teams not running PowerStore can skip it.","tier":"B","verified":{"fix":{"at":"2026-11-13T16:49:39Z","by":"analyst","doc":"https://www.dell.com/support/kbdoc/en-us/000527640/dsa-2026-479-dell-powerstore-t-security-update-for-multiple-vulnerabilities","run_id":3905},"products":{"at":"2026-11-13T16:49:39Z","by":"analyst","doc":"https://www.dell.com/support/kbdoc/en-us/000527640/dsa-2026-479-dell-powerstore-t-security-update-for-multiple-vulnerabilities","run_id":3905},"who_affected":{"at":"2026-11-13T16:49:39Z","by":"analyst","doc":"https://www.dell.com/support/kbdoc/en-us/000527640/dsa-2026-479-dell-powerstore-t-security-update-for-multiple-vulnerabilities","run_id":3905}},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":["powerstoretos","tos"],"ptokens":["os","powerstore"],"labels":["critical","dellpowerstore","infrastructure","selfhosted","storage"],"campaign_type":null,"search_a":"'-103813':14A,17A '-2026':13A,16A 'command':4A 'cve':12A,15A 'dell':1A 'inject':5A 'let':6A 'limit':8A 'os':3A,20A 'powerstor':2A 'powerstore':18A 'reach':10A 'root':11A 't':19A 'user':9A","search_b":"'applianc':32B,52B 'authent':40B 'command':36B 'contain':33B 'dell':22B,29B 'dell-powerstor':21B 'escal':47B 'flaw':38B 'host':27B 'infrastructur':24B 'inject':37B 'limit':43B 'os':35B 'potenti':46B 'powerstor':23B,30B 'privileg':44B 'root':49B 'self':26B 'self-host':25B 'storag':28B,31B 'user':41B","search_c":"'applianc':81C 'authent':62C 'command':58C 'contain':55C 'could':67C 'dell':53C 'escal':76C 'exploit':69C 'inject':59C 'lead':73C 'limit':65C 'os':57C 'potenti':68C,72C 'powerstor':54C 'privileg':66C,75C 'root':78C 'user':63C 'vulner':60C,71C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-13T16:17:21+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","cvss_by":"security_alert@emc.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-103813","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103813","severity":null,"published_at":"2026-11-13T16:17:21+00:00","modified_at":"2026-11-13T16:17:21+00:00","first_seen_at":"2026-11-13T16:47:32+00:00","fetched_at":"2026-11-13T16:47:32+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-103813:3905","url":"https://www.dell.com/support/kbdoc/en-us/000527640/dsa-2026-479-dell-powerstore-t-security-update-for-multiple-vulnerabilities","severity":null,"published_at":"2026-11-13T16:49:39+00:00","modified_at":"2026-11-13T16:49:39+00:00","first_seen_at":"2026-11-13T16:49:39+00:00","fetched_at":"2026-11-13T16:49:39+00:00","note":"Dell DSA-2026-479 read (WebFetch + web-cli, page text truncated before affected table; affected/fixed from WebFetch summary of Dell page). Fix PowerStoreT OS 5.1.0.0-2798105 or later; no workaround stated; no exploitation stated. X not checked (credits note), search found no discussion.","cites":["https://www.dell.com/support/kbdoc/en-us/000527640/dsa-2026-479-dell-powerstore-t-security-update-for-multiple-vulnerabilities"]}],"documents":[{"id":146567,"url":"https://www.dell.com/support/kbdoc/en-us/000527640/dsa-2026-479-dell-powerstore-t-security-update-for-multiple-vulnerabilities","title":"DSA-2026-479: Dell PowerStore T Security Update for Multiple Vulnerabilities","kind":"advisory","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}