{"id":"CVE-2026-91872","kind":"vulnerability","aliases":["CVE-2026-91872"],"related":[],"title":"Dell Ansible PowerStore storage: sensitive data written to log files","description":"Dell Ansible Storage for PowerStore, versions prior to 3.9.0,contains an Insertion of Sensitive Information into Log File vulnerability in the configuration module. A low privileged attacker with local access could potentially exploit this vulnerability, leading to information exposure.","summary":"Dell Ansible Storage for PowerStore versions before 3.9.0 write sensitive information into a log file from the configuration module. A low-privileged local user can read that log and see the exposed information.","severity":"medium","cvss":5.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["ansible","dell","powerstore","storage","vendor"],"not_affected_if":["no-local-untrusted-users","version-3.9.0-or-later"],"how_to_check":"- Check the installed version of Dell Ansible Storage for PowerStore; `unknown` if the sources do not say how to read it.\n- Review the configuration module logs on hosts running it for sensitive values such as credentials.","fix":"- Move to Dell Ansible Storage for PowerStore `3.9.0` or later.","status":"open","published_at":"2026-11-11T18:19:53+00:00","first_seen_at":"2026-11-11T18:28:44+00:00","triaged_at":"2026-11-11T18:29:37+00:00","updated_at":"2026-11-11T18:29:37+00:00","category":"vendor","confidence":0.7,"triage":{"at":"2026-11-11T18:29:37Z","model":"claude-haiku-5-5","output":{"fix":"- Move to Dell Ansible Storage for PowerStore `3.9.0` or later.","reach":"local","title":"Dell Ansible PowerStore storage: sensitive data written to log files","impact":"low","summary":"Dell Ansible Storage for PowerStore versions before 3.9.0 write sensitive information into a log file from the configuration module. A low-privileged local user can read that log and see the exposed information.","audience":"businesses","category":"vendor","nicknames":[],"who_cares":["dell","ansible","powerstore","storage"],"confidence":0.7,"fix_status":"available","needs_auth":"yes","worst_case":"local low-privileged user reads sensitive data from logs","analyst_note":"","how_to_check":"- Check the installed version of Dell Ansible Storage for PowerStore; `unknown` if the sources do not say how to read it.\n- Review the configuration module logs on hosts running it for sensitive values such as credentials.","plain_action":"","product_name":"","needs_analyst":false,"not_affected_if":["version-3.9.0-or-later","no-local-untrusted-users"],"who_is_affected":"Teams that run Dell Ansible Storage for PowerStore below version 3.9.0 and use its configuration module. The exposure requires local access to the host where the module logs are written, so systems without local untrusted users are lower risk. unknown whether other configurations are affected.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000712,"input_tokens":4557,"output_tokens":512,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':12A,15A '-91872':13A,16A '3.9.0':29B,64C 'access':85C 'ansibl':2A,17B,23B,57C 'attack':82C 'configur':39B,77C 'contain':65C 'could':86C 'cve':11A,14A 'data':6A 'dell':1A,18B,22B,56C 'exploit':88C 'expos':54B 'exposur':94C 'file':10A,36B,73C 'inform':32B,55B,70C,93C 'insert':67C 'lead':91C 'local':45B,84C 'log':9A,35B,50B,72C 'low':43B,80C 'low-privileg':42B 'modul':40B,78C 'potenti':87C 'powerstor':3A,19B,26B,60C 'prior':62C 'privileg':44B,81C 'read':48B 'see':52B 'sensit':5A,31B,69C 'storag':4A,20B,24B,58C 'user':46B 'vendor':21B 'version':27B,61C 'vulner':74C,90C 'write':30B 'written':7A","nicknames":[],"mitigations":[],"who_affected":"Teams that run Dell Ansible Storage for PowerStore below version 3.9.0 and use its configuration module. The exposure requires local access to the host where the module logs are written, so systems without local untrusted users are lower risk. unknown whether other configurations are affected.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["ansible","dell","medium","powerstore","storage","vendor"],"campaign_type":null,"search_a":"'-2026':12A,15A '-91872':13A,16A 'ansibl':2A 'cve':11A,14A 'data':6A 'dell':1A 'file':10A 'log':9A 'powerstor':3A 'sensit':5A 'storag':4A 'written':7A","search_b":"'3.9.0':29B 'ansibl':17B,23B 'configur':39B 'dell':18B,22B 'expos':54B 'file':36B 'inform':32B,55B 'local':45B 'log':35B,50B 'low':43B 'low-privileg':42B 'modul':40B 'powerstor':19B,26B 'privileg':44B 'read':48B 'see':52B 'sensit':31B 'storag':20B,24B 'user':46B 'vendor':21B 'version':27B 'write':30B","search_c":"'3.9.0':64C 'access':85C 'ansibl':57C 'attack':82C 'configur':77C 'contain':65C 'could':86C 'dell':56C 'exploit':88C 'exposur':94C 'file':73C 'inform':70C,93C 'insert':67C 'lead':91C 'local':84C 'log':72C 'low':80C 'modul':78C 'potenti':87C 'powerstor':60C 'prior':62C 'privileg':81C 'sensit':69C 'storag':58C 'version':61C 'vulner':74C,90C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-11T18:19:53+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss_by":"security_alert@emc.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-91872","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91872","severity":null,"published_at":"2026-11-11T18:19:53+00:00","modified_at":"2026-11-11T18:19:53+00:00","first_seen_at":"2026-11-11T18:28:44+00:00","fetched_at":"2026-11-11T18:28:44+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}