---
id: "CVE-2026-91911"
kind: "vulnerability"
aliases: ["CVE-2026-91911"]
title: "Dell OpenManage Enterprise: path traversal gives attacker filesystem access"
severity: "medium"
cvss: 6.1
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["dell", "infrastructure", "on-prem", "openmanage-enterprise", "server-management"]
not_affected_if: ["no-adjacent-network-access", "version-4.8.0-or-later"]
published_at: "2026-11-02T13:17:40+00:00"
first_seen_at: "2026-11-02T13:23:16+00:00"
updated_at: "2026-11-02T13:24:50+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-91911", "first_seen_at": "2026-11-02T13:23:16+00:00"}]
---

# Dell OpenManage Enterprise: path traversal gives attacker filesystem access

Dell OpenManage Enterprise versions before 4.8.0 contain a path traversal flaw that lets an attacker reach files outside the intended directory. The attacker needs high privileges and adjacent network access, and could read or write files on the server.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed OpenManage Enterprise version in the web console or on the appliance; `unknown` for the exact command
- Confirm whether any version is below `4.8.0`

## Fix

- Dell OpenManage Enterprise: move to `4.8.0` or later

## Timeline

- 2026-11-02T13:23:16+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-91911

## From the sources

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A high privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Filesystem access for attacker.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_