Dell Virtual Storage Integrator: unauthenticated OS command injection in IAPI gives root on the appliance

Impact

An unauthenticated remote attacker can execute arbitrary OS commands as root on the host running VSI. VSI is the storage-provisioning plugin wired into vCenter, so root there means control of the credentials and API sessions it holds for the backing Dell storage arrays and for vCenter - the datastores that GPU nodes boot from and that hold model and dataset volumes. Dell describes the outcome as complete takeover of the VSI deployment and potentially the infrastructure it manages. Remediation is a management-plane upgrade, so compute nodes do not have to be drained, but the storage control path is offline during it.

Who can reach it

Anyone who can reach the VSI appliance's IAPI endpoint over the network - in practice the management VLAN where vCenter and storage management live. No authentication required.

What to do

Upgrade Dell Virtual Storage Integrator for VMware vSphere Client to 10.11.1.0 or later per DSA-2026-335; Dell advises doing so at the earliest opportunity. Until the upgrade lands, confine reachability of the appliance to the management network and administrator jump hosts. If the endpoint was broadly reachable, treat the appliance as compromised and rotate the array and vCenter credentials it stores.

References

Related entries

• Windows Services for NFS: use-after-free in the ONCRPC XDR driver allows unauthenticated remote code executionCVE-2026-69595 · Windows Services for NFS (ONCRPC XDR driver)Critical
• Linux SUNRPC (xdr_buf_to_bvec, nfsd write path): xdr_buf_to_bvec stores a bio_vec before checking the slot is in rangeCVE-2026-72217 · Linux SUNRPC (xdr_buf_to_bvec, nfsd write path)Critical
• Linux VXLAN driver (transmit-path header pulls): `vxlan_xmit()`, `arp_reduce()` and `vxlan_mdb_entry_skb_get()`CVE-2026-74474 · Linux VXLAN driver (transmit-path header pulls)Critical
• Airflow Keycloak provider: credentials of any confidential client in the realm log into AirflowCVE-2026-76187 · Apache Airflow Keycloak provider (unauthenticated token endpoint, client-credentials grant)Critical
• Airflow FAB provider: password reset fails to evict existing sessions, so a stolen cookie keeps workingCVE-2026-82311 · Apache Airflow FAB provider (password reset does not delete database-backed sessions)Critical
• Linux nfsd: async server-side COPY registers a stateid pointing into a reused request bufferCVE-2026-89676 · Linux NFS server (nfsd, s2s_cp_stateids IDR for async COPY)Critical