CVE-2022-34426: Dell Container Storage Modules

High severity, CVSS 8.8. EPSS: 1.6% chance of exploitation in the next 30 days.

Dell Container Storage Modules 1.2 contains an Improper Limitation of a Pathname to a Restricted Directory in goiscsi and gobrick libraries which could lead to OS command injection. A remote unauthenticated attacker could exploit this vulnerability leading to unintentional access to path outside of restricted directory.

Affected products

• Dell Container Storage Modules: from 1.3.0, before 2.0.0 (fixed in 2.0.0)

Published 2022-10-11. Last modified 2026-06-17.