CVE-2026-91881: Critical severity Dell Terraform Provider for Redfish vulnerability
Dell Terraform Provider for Redfish, versions prior to 1.6.2, contains an Improper Certificate Validation vulnerability in the HTTP transport component. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure and unauthorized access. This is a Critical severity vulnerability as it allows an unauthenticated attacker to intercept all Redfish BMC traffic including credentials by performing a man-in-the-middle attack, since TLS certificate verification is unconditionally disabled in the base HTTP transport. Dell recommends customers to upgrade at the earliest opportunity.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Dell Terraform Provider for Redfishto a version that resolves this vulnerability.Fixed in 1.6.2
Event History
Frequently Asked Questions
Who is realistically exposed to this issue?
Users of Dell Terraform Provider for Redfish versions earlier than 1.6.2 are exposed when the provider communicates with Redfish BMC endpoints over a network where an attacker can position themselves to intercept that traffic.
What does an attacker need to exploit it?
The attacker does not need authentication or user interaction, but needs remote network access and the ability to perform a man-in-the-middle attack on Redfish BMC traffic. Exploitation is complicated by the need to intercept or alter the network connection.
Are credentials at risk?
Yes. TLS certificate verification is unconditionally disabled in the base HTTP transport, allowing a man-in-the-middle attacker to intercept Redfish BMC traffic, including credentials, and potentially gain unauthorized access.
What should be done if patching cannot happen immediately?
The provided information recommends upgrading to version 1.6.2 or later at the earliest opportunity. Until then, reduce exposure by limiting access to the network paths used for Redfish BMC traffic, since exploitation requires interception of that traffic.