High severity8.8NVD Advisory· Published Nov 11, 2026

CVE-2026-91879

Description

Dell Terraform for ObjectScale and Powerstore, versions prior to 1.1.1 (ObjectScale) and versions 1.2.1 through 1.3.0 (PowerStore) contains an insertion of sensitive information into Log File vulnerability in the client initialization component. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to information exposure and unauthorized access.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Dell/Terraform Provider Dell Powerstoreinferred
Range: >=1.2.1,<1.3.0
Dell/Terraform for ObjectScalellm-create
Range: <1.1.1
Dell/Terraform for Powerstorellm-create
Range: 1.2.1 - 1.3.0

Patches

Vulnerability mechanics

References

www.dell.com/support/kbdoc/en-in/000515434/dsa-2026-433-security-update-for-dell-terraform-provider-for-dell-storage-multiple-vulnerabilitiesnvd

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000