CVE-2026-91882
CVE-2026-91882
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Dell Terraform Provider for OME, versions 1.0.0 through 1.2.3, contains an Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in the API client error handling component. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure.
CVSS 8.6 · High · EPSS 0.4% · Fix available
- Published
- Updated
Affected products and versions
terraform provider for ome
- Versions
- ≥ 0, < 1.2.4 or later: Affected (semver)
Update to 1.2.4 or later