DELL OPENMANAGE ANSIBLE MODULES · CVE-2026-91875 · Infrastructure
FIX → 11.0.0 ✓ verified
Dell OpenManage Ansible Modules versions 9.2.0 through 10.0.3 do not properly validate certificates in the SessionAPI component. An unauthenticated remote attacker could potentially read information and gain unauthorized access.
first public Nov 11, 2026 · 2 sources
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Teams that run Ansible with the Dell OpenManage Ansible Modules collection in versions 9.2.0 through 10.0.3 are affected through the SessionAPI component, which does not properly validate certificates. Dell's workaround is to set validate_certs=True explicitly when using SessionAPI, so playbooks that do this are the ones to check first. Teams that do not use this collection, or already run 11.0.0 or later, can skip it.
Not affected if outside-affected-versions, validate-certs-enabled
Who cares ansible, dell-openmanage, idrac, self-hosted
ansible-galaxy collection list dellemc.openmanage (or check requirements.yml / the collections path) and compare the version with the affected range 9.2.0 through 10.0.3Dell OpenManage Ansible Modules, versions 9.2.0 through 10.0.3, contains an Improper Certificate Validation vulnerability in the SessionAPI component. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure and unauthorized access.
This page as .md · .json · CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
Upgrade to 11.0.0
11.0.0 or later (Dell DSA-2026-432)