---
id: "CVE-2026-91870"
page: "https://infrastack.ai/live/CVE-2026-91870"
kind: "vulnerability"
aliases: ["CVE-2026-91870"]
title: "Dell Ansible Storage for PowerFlex: certificate checks missing in API client"
severity: "high"
cvss: 7.4
epss: null
exploited: false
status: "open"
category: "vendor"
products: []
ecosystems: []
tags: ["ansible", "dell", "powerflex", "storage", "vendor"]
not_affected_if: ["not-using-powerflex-collection"]
published_at: "2026-11-11T18:19:53+00:00"
first_seen_at: "2026-11-11T18:28:44+00:00"
updated_at: "2026-11-11T18:29:26+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-91870", "first_seen_at": "2026-11-11T18:28:44+00:00"}]
exploit_sources: []
---

# Dell Ansible Storage for PowerFlex: certificate checks missing in API client

Link for people: https://infrastack.ai/live/CVE-2026-91870 (this .md is for agents)

Dell Ansible Storage for PowerFlex versions before 3.2.0 do not properly validate certificates in the API client. A remote attacker without credentials could intercept or impersonate the PowerFlex API, exposing information and gaining unauthorized access.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed version of Dell Ansible Storage for PowerFlex (the collection), and look for any release earlier than `3.2.0`.

## Fix

- Dell Ansible Storage for PowerFlex: upgrade to `3.2.0` or later

## Timeline

- 2026-11-11T18:28:44+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-91870

## From the sources

Dell Ansible Storage for PowerFlex, versions prior to 3.2.0, contains an Improper Certificate Validation vulnerability in the API client component. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure and unauthorized access.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_