CVE-2026-40633 is an information disclosure vulnerability in Dell PowerScale OneFS affecting versions 9.5.0.0 through 9.10.1.7 and 9.11.0.0 through 9.13.0.2. The vulnerability involves the insertion of sensitive information into log files (CWE-532). A low privileged attacker with local access could exploit this issue to gain unauthorized access to sensitive data. The CVSS v3.1 base score is 7.8, indicating high severity with local attack vector, low attack complexity, and no user interaction required. The vendor has not published any official remediation or patch at this time.

Exploitation of this vulnerability could lead to unauthorized disclosure of sensitive information contained within log files. This could compromise confidentiality and potentially integrity and availability, as indicated by the CVSS vector. The attacker requires local access with low privileges to exploit the vulnerability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict local access to trusted users only and monitor for any suspicious activity related to log file access. Avoid exposing sensitive information in logs where possible through configuration adjustments if supported.