Information Exposure in Dell Terraform for ObjectScale and PowerStore
CVE-2026-91879

8.8HIGH

Key Information:

Vendor

Dell
Status
Terraform Provider For Objectscale
Terraform Provider For Powerstore
Vendor
CVE Published:
11 November 2026

What is CVE-2026-91879?

Dell Terraform for ObjectScale and PowerStore has a vulnerability that allows low privileged attackers to cause insertion of sensitive information into log files during client initialization. This flaw can be exploited remotely, potentially leading to unauthorized access and the exposure of sensitive data. It is crucial for users to apply the necessary updates to safeguard their systems from potential exploitation.

Affected Version(s)

Terraform Provider for ObjectScale 0 < 1.1.1 or later

Terraform Provider for PowerStore 0 < 1.3.1 or later

References

https://www.dell.com/support/kbdoc/en-in/000515434/dsa-20...
vendor-advisory

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.