CVE-2026-27102 is an incorrect privilege assignment vulnerability in Dell PowerScale OneFS affecting versions 9.5.0.0 through 9.10.1.6 and 9.11.0.0 through 9.13.0.1. It allows a local attacker with low privileges to escalate their privileges on the affected system. The vulnerability is classified under CWE-266. The CVSS score of 6.6 reflects a medium impact with local attack vector, low attack complexity, and no user interaction required. Confidentiality and integrity impacts are low, but availability impact is high. No vendor advisory or patch information is currently available.

A low privileged local attacker could exploit this vulnerability to gain elevated privileges on the affected Dell PowerScale OneFS systems. This could lead to unauthorized actions that require higher privileges, potentially impacting system availability severely. Confidentiality and integrity impacts are considered low based on the CVSS vector. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, limit local access to trusted users only and monitor for unusual privilege escalations. Avoid granting unnecessary local access to reduce risk.