CVE-2026-49501 is an improper privilege management vulnerability in Dell PowerScale OneFS affecting versions 9.5.0.0 through 9.10.1.7 and 9.11.0.0 through 9.13.0.2. A high privileged attacker with local access could exploit this vulnerability to elevate their privileges further. The CVSS 3.1 base score is 6.7, reflecting medium severity with high impact on confidentiality, integrity, and availability. No vendor advisory or patch information is currently available, and the vulnerability is not known to be exploited in the wild.

An attacker with existing high privileges and local access to the affected Dell PowerScale OneFS systems could exploit this vulnerability to gain elevated privileges beyond their current level. This could lead to unauthorized access to sensitive data, modification of system configurations, or disruption of service. The impact affects confidentiality, integrity, and availability of the system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict local access to trusted users only and monitor for suspicious activities involving privilege escalations. Follow Dell's security advisories for updates on patches or mitigations.