CVE-2026-91883: Medium severity Dell Terraform Provider for OME vulnerability
Published Oct 14, 2026
·Updated
Dell Terraform Provider for OME, versions 1.0.0 through 1.2.3, contains an Insertion of Sensitive Information into Log File vulnerability in the provider configuration component. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to information exposure.
Affected Software
1 affected component
Dell Terraform Provider for OME>=1.0.0<=1.2.3
Event History
Oct 14, 2026
CVE Published
via MITRE·03:20 PM
Data Sourced
via MITRE·03:20 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which deployments are affected?
Dell Terraform Provider for OME versions 1.0.0 through 1.2.3 are affected. The issue is in the provider configuration component.
2
What access does an attacker need?
Exploitation requires remote access and low-privileged access. No user interaction is required.
3
What is the expected impact?
The vulnerability can expose sensitive information through log files. The supplied severity vector indicates low confidentiality impact and no integrity or availability impact.