Dell OpenManage Enterprise: loose permissions on a critical resource bypass protection locally

CVSS 5.5CVE-2026-91904Firmware, BMC & network fabric+1 more CVEscurated

Impact

A critical resource on the OpenManage Enterprise appliance carries permissions that are too broad, so a low-privileged local user can bypass a protection mechanism and reach information Dell rates as high-confidentiality. On a fleet management appliance that stores iDRAC credentials, this is the local escalation step that turns any foothold on the host into access to the fleet's out-of-band credentials. Dell split this across two ids in DSA-2026-467 - CVE-2026-91904 and CVE-2026-91906 - with identical descriptions, vectors and scores and the same fix; they are recorded as one issue here. The affected resource is not named.

Who can reach it

Local access to the OME appliance host with any low-privileged account. Authentication required; not reachable over the network.

What to do

Upgrade to OpenManage Enterprise 4.8.0 (DSA-2026-467): appliance update and console restart, covering both ids. No interim workaround is published; restrict local and shell access to the appliance.

Also covers 1 CVE

The vendor assigned a separate id to each affected code path. They share this advisory, this score and this fix, so they are one entry here.

CVE-2026-91906

References

https://nvd.nist.gov/vuln/detail/CVE-2026-91904 https://nvd.nist.gov/vuln/detail/CVE-2026-91906 https://www.dell.com/support/kbdoc/en-us/000523220/dsa-2026-467-security-update-for-dell-openmanage-enterprise-vulnerabilities

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.