CVE-2026-40711 describes an OS Command Injection vulnerability in Dell Container Storage Modules, specifically in versions csi-powerstore v2.16.0, csi-unity v2.16.0, csi-powerflex v2.16.0, and csi-powermax v2.16.0. The vulnerability arises from improper neutralization of special elements used in OS commands, enabling a high privileged remote attacker to execute arbitrary commands. The CVSS v3.1 score is 8.0, indicating high impact on confidentiality, integrity, and availability. No vendor advisory or patch information is provided, and no known exploits are reported in the wild.

Successful exploitation could lead to remote command execution with high privileges, compromising confidentiality, integrity, and availability of the affected systems. This could allow attackers to execute arbitrary OS commands remotely, potentially leading to full system compromise.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict remote access to the affected modules to trusted users only and monitor for suspicious activity related to command execution. Follow Dell's official communications for updates on patches or mitigations.