Dell OMSA: high-privileged remote user escalates beyond their assigned OMSA role

Impact

An account already holding high OMSA privilege can escalate further, taking full confidentiality, integrity and availability of the node. The practical concern is that OMSA's administrative role stops being a boundary at all: an operator scoped to hardware administration on one server crosses into full host control. This is the lowest-urgency item in DSA-2026-403 for operators who tightly control admin accounts, and it ships in the same package as the rest.

Who can reach it

Network access to OMSA with a high-privileged (administrative) OMSA account.

What to do

Upgrade OMSA to 11.1.0.3 or later on all managed nodes and restart the OMSA services, alongside the other DSA-2026-403 fixes.

References

Related entries

• Dell OMSA: remote heap overflow gives code execution to a high-privileged accountCVE-2026-81477 · Dell OpenManage Server Administrator (remote heap-based buffer overflow)High
• Dell OMSA: remote stack overflow gives code execution to a high-privileged accountCVE-2026-81480 · Dell OpenManage Server Administrator (stack-based buffer overflow)High
• Intel CSME / Converged Security and Management Engine (mask ROM): A flaw in the CSME boot ROM window before memoryCVE-2019-0090 · Intel CSME / Converged Security and Management Engine (mask ROM)High
• Dell iDRAC9 (web interface, local file inclusion): A path-traversal / local-file-inclusion flaw lets a low-privilegeCVE-2020-5366 · Dell iDRAC9 (web interface, local file inclusion)High
• Dell iDRAC9: TOCTOU race during simultaneous web-interface access — state corruption on the BMCCVE-2021-21539 · Dell iDRAC9High
• AMD SEV-ES firmware - TMR placement in MMIO space: SEV-ES firmware does not verify that the Trusted Memory Region isCVE-2021-26332 · AMD SEV-ES firmware - TMR placement in MMIO spaceHigh