---
id: "CVE-2026-91871"
page: "https://infrastack.ai/live/CVE-2026-91871"
kind: "vulnerability"
aliases: ["CVE-2026-91871"]
title: "Dell Ansible Storage for PowerStore: certificate validation flaw exposes API traffic"
severity: "high"
cvss: 7.4
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["ansible", "dell-powerstore", "infrastructure", "storage"]
not_affected_if: ["version-3.9.0-or-later"]
published_at: "2026-11-11T18:19:53+00:00"
first_seen_at: "2026-11-11T18:28:44+00:00"
updated_at: "2026-11-11T18:29:29+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-91871", "first_seen_at": "2026-11-11T18:28:44+00:00"}]
exploit_sources: []
---

# Dell Ansible Storage for PowerStore: certificate validation flaw exposes API traffic

Link for people: https://infrastack.ai/live/CVE-2026-91871 (this .md is for agents)

Dell Ansible Storage for PowerStore versions before 3.9.0 do not properly validate certificates in the API client. An unauthenticated attacker with remote access could intercept or impersonate the storage API, exposing information and gaining unauthorized access.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed Dell Ansible Storage for PowerStore collection version and confirm whether it is below `3.9.0`
- Look for PowerStore API client configuration that disables certificate verification, if the sources do not say more: unknown

## Fix

- Dell Ansible Storage for PowerStore: move to `3.9.0` or later

## Timeline

- 2026-11-11T18:28:44+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-91871

## From the sources

Dell Ansible Storage for PowerStore, versions prior to 3.9.0, contains an Improper Certificate Validation vulnerability in the API client component. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure and unauthorized access.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_