{"id":"CVE-2026-91877","kind":"vulnerability","aliases":["CVE-2026-91877"],"related":[],"title":"Dell OpenManage Ansible Modules: OData filter flaw allows unauthorized data access","description":"Dell OpenManage Ansible Modules, versions 2.0.2 through 10.0.3, contains an Improper Neutralization of Special Elements in Data Query Logic vulnerability in the OData filter processing component. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized data access, authorization bypass, and denial of service.","summary":"Dell OpenManage Ansible Modules versions 2.0.2 through 10.0.3 mishandle special characters in OData filter queries. A low-privileged remote attacker could read data they should not see, bypass authorization, or cause a denial of service.","severity":"high","cvss":7.6,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["ansible","dell-openmanage","dell-servers","infrastructure"],"not_affected_if":["not-affected-version-range"],"how_to_check":"- Check the installed version of the Dell OpenManage Ansible Modules collection (for example, `ansible-galaxy collection list dellemc.openmanage`) and see whether it falls between `2.0.2` and `10.0.3`.","fix":"- Move to a version later than `10.0.3`; the sources do not name the fixed release.","status":"open","published_at":"2026-11-11T19:17:47+00:00","first_seen_at":"2026-11-11T19:28:49+00:00","triaged_at":"2026-11-11T19:30:01+00:00","updated_at":"2026-11-11T19:30:01+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-11-11T19:30:01Z","model":"claude-haiku-5-5","output":{"fix":"- Move to a version later than `10.0.3`; the sources do not name the fixed release.","reach":"network","title":"Dell OpenManage Ansible Modules: OData filter flaw allows unauthorized data access","impact":"medium","summary":"Dell OpenManage Ansible Modules versions 2.0.2 through 10.0.3 mishandle special characters in OData filter queries. A low-privileged remote attacker could read data they should not see, bypass authorization, or cause a denial of service.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["ansible","dell-openmanage","dell-servers"],"confidence":0.6,"fix_status":"unknown","needs_auth":"yes","worst_case":"Attacker reads unauthorized data, bypasses authorization, or crashes the service","analyst_note":"Check Dell's security advisory for the fixed version and whether the OData component is reachable by default.","how_to_check":"- Check the installed version of the Dell OpenManage Ansible Modules collection (for example, `ansible-galaxy collection list dellemc.openmanage`) and see whether it falls between `2.0.2` and `10.0.3`.\n- unknown for other checks; the sources do not say.","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["not-affected-version-range"],"who_is_affected":"Teams that run Dell OpenManage Ansible Modules to manage Dell servers and infrastructure are exposed in the affected version range. The flaw is in the OData filter processing component, so reachability depends on whether that component is exposed to the attacker's network. Teams not using these modules can skip it.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.00076,"input_tokens":4586,"output_tokens":603,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-2026':13A,16A '-91877':14A,17A '10.0.3':33B,69C '2.0.2':31B,67C 'access':11A,94C,104C 'allow':8A 'ansibl':3A,18B,28B,64C 'attack':46B,91C 'author':55B,105C 'bypass':54B,106C 'caus':57B 'charact':36B 'compon':87C 'contain':70C 'could':47B,95C 'cve':12A,15A 'data':10A,49B,78C,103C 'dell':1A,20B,23B,26B,62C 'dell-openmanag':19B 'dell-serv':22B 'denial':59B,108C 'element':76C 'exploit':97C 'filter':6A,39B,85C 'flaw':7A 'improp':72C 'infrastructur':25B 'lead':100C 'logic':80C 'low':43B,89C 'low-privileg':42B 'mishandl':34B 'modul':4A,29B,65C 'neutral':73C 'odata':5A,38B,84C 'openmanag':2A,21B,27B,63C 'potenti':96C 'privileg':44B,90C 'process':86C 'queri':40B,79C 'read':48B 'remot':45B,93C 'see':53B 'server':24B 'servic':61B,110C 'special':35B,75C 'unauthor':9A,102C 'version':30B,66C 'vulner':81C,99C","nicknames":[],"mitigations":[],"who_affected":"Teams that run Dell OpenManage Ansible Modules to manage Dell servers and infrastructure are exposed in the affected version range. The flaw is in the OData filter processing component, so reachability depends on whether that component is exposed to the attacker's network. Teams not using these modules can skip it.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"unknown","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["ansible","dellopenmanage","dellservers","high","infrastructure"],"campaign_type":null,"search_a":"'-2026':13A,16A '-91877':14A,17A 'access':11A 'allow':8A 'ansibl':3A 'cve':12A,15A 'data':10A 'dell':1A 'filter':6A 'flaw':7A 'modul':4A 'odata':5A 'openmanag':2A 'unauthor':9A","search_b":"'10.0.3':33B '2.0.2':31B 'ansibl':18B,28B 'attack':46B 'author':55B 'bypass':54B 'caus':57B 'charact':36B 'could':47B 'data':49B 'dell':20B,23B,26B 'dell-openmanag':19B 'dell-serv':22B 'denial':59B 'filter':39B 'infrastructur':25B 'low':43B 'low-privileg':42B 'mishandl':34B 'modul':29B 'odata':38B 'openmanag':21B,27B 'privileg':44B 'queri':40B 'read':48B 'remot':45B 'see':53B 'server':24B 'servic':61B 'special':35B 'version':30B","search_c":"'10.0.3':69C '2.0.2':67C 'access':94C,104C 'ansibl':64C 'attack':91C 'author':105C 'bypass':106C 'compon':87C 'contain':70C 'could':95C 'data':78C,103C 'dell':62C 'denial':108C 'element':76C 'exploit':97C 'filter':85C 'improp':72C 'lead':100C 'logic':80C 'low':89C 'modul':65C 'neutral':73C 'odata':84C 'openmanag':63C 'potenti':96C 'privileg':90C 'process':86C 'queri':79C 'remot':93C 'servic':110C 'special':75C 'unauthor':102C 'version':66C 'vulner':81C,99C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-11T19:17:47+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L","cvss_by":"security_alert@emc.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-91877","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91877","severity":null,"published_at":"2026-11-11T19:17:47+00:00","modified_at":"2026-11-11T19:17:47+00:00","first_seen_at":"2026-11-11T19:28:49+00:00","fetched_at":"2026-11-11T19:28:49+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}