Dell SmartFabric OS10 (execution with unnecessary privileges): A low-privileged attacker escalates through an OS10

Impact

A low-privileged attacker escalates through an OS10 component running with more privilege than it needs. OS10 is a Linux-based NOS, so escalation here is root on a box that programs the forwarding ASIC — arbitrary control over which tenant's traffic goes where. Sits alongside a long series of OS10 command-injection findings (CVE-2024-48830, CVE-2024-49557, CVE-2024-49560, CVE-2025-22472, CVE-2025-22473, CVE-2025-46427, CVE-2025-46428) that all give a low-privileged local or remote user a path to root.

Who can reach it

Low-privileged attacker with access to the switch, versions 10.5.4.x through 10.6.0.x.

What to do

OS10 upgrade plus reload. Because so many of these share the same precondition — a low-privileged account on the switch — the highest-leverage control is eliminating low-privilege switch accounts entirely and driving all changes through an automation account on a bastion.

References