CVE-2026-54489 is a sensitive information disclosure vulnerability (CWE-200) in Dell Virtual Storage Integrator for VMware vSphere Client. Versions before 10.11.1.0 are affected. An unauthenticated remote attacker can exploit this flaw to obtain active session credentials, resulting in full impersonation of authenticated users, including administrators. The vulnerability has a CVSS 3.1 base score of 9.1, indicating critical severity with network attack vector, low attack complexity, no privileges required, and no user interaction needed. No official remediation level or patch link is provided in the data, but Dell recommends upgrading to version 10.11.1.0 or later.

The vulnerability allows unauthenticated remote attackers to disclose sensitive information and hijack active sessions. This leads to complete impersonation of authenticated users, including administrators, potentially compromising the confidentiality and integrity of the affected system. The critical CVSS score reflects the high impact on confidentiality and integrity without requiring privileges or user interaction.

Dell recommends customers upgrade to version 10.11.1.0 or later at the earliest opportunity to remediate this vulnerability. Patch status is not explicitly confirmed in the provided data; therefore, check Dell's official advisory for current remediation guidance.