---
id: "CVE-2026-103813"
page: "https://infrastack.ai/live/CVE-2026-103813"
kind: "vulnerability"
aliases: ["CVE-2026-103813"]
title: "Dell PowerStore: OS command injection lets a limited user reach root"
severity: "critical"
cvss: 9.1
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: [{"name": "PowerStore T OS", "fixed": ["5.1.0.0-2798105"], "affected": "< 5.1.0.0-2798105", "ecosystem": "vendor"}]
ecosystems: []
tags: ["dell-powerstore", "infrastructure", "self-hosted", "storage"]
not_affected_if: ["auth-required", "no-powerstore-appliance"]
published_at: "2026-11-13T16:17:21+00:00"
first_seen_at: "2026-11-13T16:47:32+00:00"
updated_at: "2026-11-13T16:49:39+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-103813", "first_seen_at": "2026-11-13T16:47:32+00:00"}, {"source": "analyst", "url": "https://www.dell.com/support/kbdoc/en-us/000527640/dsa-2026-479-dell-powerstore-t-security-update-for-multiple-vulnerabilities", "first_seen_at": "2026-11-13T16:49:39+00:00", "cites": ["https://www.dell.com/support/kbdoc/en-us/000527640/dsa-2026-479-dell-powerstore-t-security-update-for-multiple-vulnerabilities"]}]
exploit_sources: []
---

# Dell PowerStore: OS command injection lets a limited user reach root

Link for people: https://infrastack.ai/live/CVE-2026-103813 (this .md is for agents)

Dell PowerStore storage appliances contain an OS command injection flaw. An authenticated user with limited privileges can potentially escalate to root on the appliance.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:PowerStore T OS affected < 5.1.0.0-2798105 fixed 5.1.0.0-2798105

## How to check

Check the PowerStore T OS release (PowerStore Manager > Settings > Software, or the appliance software version). Versions prior to 5.1.0.0-2798105 are affected. Also review which accounts have limited-privilege management access and restrict management interfaces to trusted admin networks.

## Fix

Upgrade PowerStore T OS to 5.1.0.0-2798105 or later (per-model download on Dell support).

## Timeline

- 2026-11-13T16:47:32+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-103813
- 2026-11-13T16:49:39+00:00 analyst https://www.dell.com/support/kbdoc/en-us/000527640/dsa-2026-479-dell-powerstore-t-security-update-for-multiple-vulnerabilities — Dell DSA-2026-479 read (WebFetch + web-cli, page text truncated before affected table; affected/fixed from WebFetch summary of Dell page). Fix PowerStoreT OS 5.1.0.0-2798105 or later; no workaround stated; no exploitation stated. X not checked (credits note), search found no discussion.

## Documents

- [advisory] DSA-2026-479: Dell PowerStore T Security Update for Multiple Vulnerabilities https://www.dell.com/support/kbdoc/en-us/000527640/dsa-2026-479-dell-powerstore-t-security-update-for-multiple-vulnerabilities

## From the sources

Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability, potentially leading to privilege escalation to root on the appliance.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_