{"id":"CVE-2026-91911","kind":"vulnerability","aliases":["CVE-2026-91911"],"related":[],"title":"Dell OpenManage Enterprise: path traversal gives attacker filesystem access","description":"Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A high privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Filesystem access for attacker.","summary":"Dell OpenManage Enterprise versions before 4.8.0 contain a path traversal flaw that lets an attacker reach files outside the intended directory. The attacker needs high privileges and adjacent network access, and could read or write files on the server.","severity":"medium","cvss":6.1,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["dell","infrastructure","on-prem","openmanage-enterprise","server-management"],"not_affected_if":["no-adjacent-network-access","version-4.8.0-or-later"],"how_to_check":"- Check the installed OpenManage Enterprise version in the web console or on the appliance; `unknown` for the exact command\n- Confirm whether any version is below `4.8.0`","fix":"- Dell OpenManage Enterprise: move to `4.8.0` or later","status":"open","published_at":"2026-11-02T13:17:40+00:00","first_seen_at":"2026-11-02T13:23:16+00:00","triaged_at":"2026-11-02T13:24:50+00:00","updated_at":"2026-11-02T13:24:50+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-11-02T13:24:50Z","model":"claude-haiku-5-5","output":{"fix":"- Dell OpenManage Enterprise: move to `4.8.0` or later","reach":"network","title":"Dell OpenManage Enterprise: path traversal gives attacker filesystem access","impact":"high","summary":"Dell OpenManage Enterprise versions before 4.8.0 contain a path traversal flaw that lets an attacker reach files outside the intended directory. The attacker needs high privileges and adjacent network access, and could read or write files on the server.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["dell","openmanage-enterprise","on-prem","server-management"],"confidence":0.6,"fix_status":"available","needs_auth":"yes","worst_case":"attacker reads or writes arbitrary files on the management server","analyst_note":"","how_to_check":"- Check the installed OpenManage Enterprise version in the web console or on the appliance; `unknown` for the exact command\n- Confirm whether any version is below `4.8.0`","plain_action":"","needs_analyst":false,"not_affected_if":["version-4.8.0-or-later","no-adjacent-network-access"],"who_is_affected":"Teams that run Dell OpenManage Enterprise for server management on versions before 4.8.0. The attacker must already hold high privileges and sit on an adjacent network, so exposure is limited to internal management networks. Teams on 4.8.0 or later, or with no OpenManage Enterprise deployment, can skip it.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000686,"input_tokens":4146,"output_tokens":543,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':11A,14A '-91911':12A,15A '4.8.0':32B,72C 'access':9A,56B,94C,103C 'adjac':54B,92C 'attack':7A,41B,49B,90C,105C 'contain':33B,73C 'could':58B,95C 'cve':10A,13A 'dell':1A,16B,27B,66C 'directori':47B,83C 'enterpris':3A,23B,29B,68C 'exploit':97C 'file':43B,62B 'filesystem':8A,102C 'flaw':37B 'give':6A 'high':51B,88C 'improp':75C 'infrastructur':17B 'intend':46B 'lead':100C 'let':39B 'limit':76C 'manag':26B 'need':50B 'network':55B,93C 'on-prem':18B 'openmanag':2A,22B,28B,67C 'openmanage-enterpris':21B 'outsid':44B 'path':4A,35B,84C 'pathnam':79C 'potenti':96C 'prem':20B 'prior':70C 'privileg':52B,89C 'reach':42B 'read':59B 'restrict':82C 'server':25B,65B 'server-manag':24B 'travers':5A,36B,85C 'version':30B,69C 'vulner':86C,99C 'write':61B","nicknames":[],"mitigations":[],"who_affected":"Teams that run Dell OpenManage Enterprise for server management on versions before 4.8.0. The attacker must already hold high privileges and sit on an adjacent network, so exposure is limited to internal management networks. Teams on 4.8.0 or later, or with no OpenManage Enterprise deployment, can skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["dell","infrastructure","medium","onprem","openmanageenterprise","servermanagement"],"first_public_at":"2026-11-02T13:17:40+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H","cvss_by":"security_alert@emc.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-91911","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91911","severity":null,"published_at":"2026-11-02T13:17:40+00:00","modified_at":"2026-11-02T13:17:40+00:00","first_seen_at":"2026-11-02T13:23:16+00:00","fetched_at":"2026-11-02T13:23:16+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}