CVE-2026-91882

35th percentile - higher than 35% of all known CVEs

Dell Terraform Provider for OME, versions 1.0.0 through 1.2.3, contains an Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in the API client error handling component. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure.

An unauthenticated attacker can access sensitive information, potentially compromising the confidentiality of organizational data.

Update Dell Terraform Provider for OME to a version later than 1.2.3. Restrict remote access to the API and monitor logs for unauthorized access attempts.