---
id: "CVE-2026-91891"
page: "https://infrastack.ai/live/CVE-2026-91891"
kind: "vulnerability"
aliases: ["CVE-2026-91891"]
title: "Dell Terraform Provider for PowerStore leaks authentication data in diagnostic logs"
severity: "high"
cvss: 7.5
epss: null
exploited: false
status: "open"
category: "vendor"
products: []
ecosystems: []
tags: ["dell-powerstore", "infrastructure-as-code", "terraform", "vendor"]
not_affected_if: ["version-1.3.1-or-later"]
published_at: "2026-11-11T19:17:48+00:00"
first_seen_at: "2026-11-11T19:28:50+00:00"
updated_at: "2026-11-11T19:30:03+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-91891", "first_seen_at": "2026-11-11T19:28:50+00:00"}]
exploit_sources: []
---

# Dell Terraform Provider for PowerStore leaks authentication data in diagnostic logs

Link for people: https://infrastack.ai/live/CVE-2026-91891 (this .md is for agents)

The Dell Terraform Provider for PowerStore, before version 1.3.1, does not fully redact sensitive authentication data written to its diagnostic logs. An unauthenticated remote attacker who can reach those logs could read the exposed credentials.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed provider version in the Terraform configuration or lock file (`.terraform.lock.hcl`) for the Dell PowerStore provider.
- Look for diagnostic or debug log output from the provider and confirm whether it contains authentication values.

## Timeline

- 2026-11-11T19:28:50+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-91891

## From the sources

Dell Terraform Provider for PowerStore, versions prior to 1.3.1 , contains a  vulnerability that may cause sensitive authentication data to be insufficiently redacted in diagnostic logs. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_