Dell Ansible Storage for PowerStore: Sensitive information written to log file
Summary
Dell Ansible Storage for PowerStore versions prior to 3.9.0 write sensitive information into a log file through the configuration module. A low-privileged local user can read this data, which leads to information disclosure. The attack requires local access to a host running the Ansible content. The vulnerability is not reachable over the network.
Affected
- Dell Ansible Storage for PowerStore (Ansible-PowerStore), versions prior to 3.9.0
Fixed in
- Version 3.9.0 or later (per Dell DSA-2026-431)
Workaround
No vendor workaround for this CVE. Dell's workaround entries cover other CVEs in the same advisory.
Exploitation
- Not known to be exploited (OffSeq).
- No public proof of concept found.
- Not listed in CISA KEV at the time of research.
Our recommendation
- Update Dell Ansible Storage for PowerStore to version 3.9.0 or later together with the other DSA-2026-431 fixes.
- Limit local shell and file access on Ansible control nodes to trusted users.
- Review existing logs on these hosts for credentials or other sensitive data and rotate any secrets that may have been exposed.
- Prioritise the update, because CVE-2026-91871 in the same product is network-reachable and rated 7.4.
Public exploits
PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.
Research sources
- Dell DSA-2026-431 Security Update (KB 000515361) www.dell.com
- OffSeq threat radar: CVE-2026-91872 radar.offseq.com
- CVE record summary: CVE-2026-91872 cve.threatint.com
- Related CVE-2026-91871 (improper certificate validation) cve.threatint.com
Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 11 Nov 2026, 19:31.
Original description (NVD)
Dell Ansible Storage for PowerStore, versions prior to 3.9.0,contains an Insertion of Sensitive Information into Log File vulnerability in the configuration module. A low privileged attacker with local access could potentially exploit this vulnerability, leading to information exposure.
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.