Dell Terraform for ObjectScale and PowerStore: Sensitive information insertion into log file (CVE-2026-91879)
Dell Terraform for ObjectScale and PowerStore contains a vulnerability in the client initialization component that allows a low-privileged remote attacker to access sensitive information inserted into log files.
CVE search metadata
CVE search record: CVE-2026-91879. Severity: high. CVSS: 8.8. KEV: no. Product: Terraform for ObjectScale (1.2.1-1.3.0), Terraform for PowerStore (1.2.1-1.3.0). Brief: Dell Terraform for ObjectScale and PowerStore: Sensitive information insertion into log file (CVE-2026-91879). Brief link: https://feed.craftedsignal.io/briefs/2026-11-dell-terraform-log-exposure-cve-2026-91879/
Triage facts
Revision 1- Applicability
- Terraform for ObjectScale (1.2.1-1.3.0), Terraform for PowerStore (1.2.1-1.3.0)
- Evidence
- Unknown
- Severity
- High
- Sources
- 1 public source
- Freshness
- Revision 1Nov 12, 00:09 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
Dell Terraform for ObjectScale (versions prior to 1.1.1) and Dell Terraform for PowerStore (versions 1.2.1 through 1.3.0) contain an insertion of sensitive information into Log File vulnerability within the client initialization component. A low-privileged attacker with remote access can potentially exploit this to cause information exposure and unauthorized access.
Impact
Successful exploitation results in unauthorized information exposure, which may lead to unauthorized access.
Recommendation
Consult Dell for official guidance and security updates regarding CVE-2026-91879.