CVE-2026-91877 · Infrastructure
NO FIX YET · SEE WHAT TO DO
Dell OpenManage Ansible Modules versions 2.0.2 through 10.0.3 mishandle special characters in OData filter queries. A low-privileged remote attacker could read data they should not see, bypass authorization, or cause a denial of service.
first public Nov 11, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Teams that run Dell OpenManage Ansible Modules to manage Dell servers and infrastructure are exposed in the affected version range. The flaw is in the OData filter processing component, so reachability depends on whether that component is exposed to the attacker's network. Teams not using these modules can skip it.
Not affected if not-affected-version-range
Who cares ansible, dell-openmanage, dell-servers
ansible-galaxy collection list dellemc.openmanage) and see whether it falls between 2.0.2 and 10.0.3.10.0.3; the sources do not name the fixed release.Dell OpenManage Ansible Modules, versions 2.0.2 through 10.0.3, contains an Improper Neutralization of Special Elements in Data Query Logic vulnerability in the OData filter processing component. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized data access, authorization bypass, and denial of service.
This page as .md · .json · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.