Advisory · CVE-2026-91909
Dell OpenManage Enterprise argument injection allows command execution
Dell OpenManage Enterprise before 4.8.0 lets a low privileged attacker with adjacent network access inject command arguments and execute commands.
- Vendor
- Dell
- Product
- OpenManage Enterprise
- Identifier / CWE
- CVE-2026-91909
CWE-88 - Action timing
- Immediate
Explain it like I’m five
OpenManage Enterprise passes a low privileged users input into a command without separating the users words from the commands own options. An attacker can slip in extra options that change what the command does.
- 01Adjacent low privileged access
A low privileged attacker reaches OpenManage Enterprise from an adjacent network.
- 02Argument delimiter injected
The attacker supplies input containing argument delimiters that are not neutralized.
- 03Command arguments altered
The injected delimiters change how the downstream command interprets its arguments.
- 04Command execution
The altered command runs with the privileges of the OpenManage Enterprise service.
What happened
Dell OpenManage Enterprise versions prior to 4.8.0 contain an improper neutralization of argument delimiters in a command vulnerability. A low privileged attacker with adjacent network access could exploit it to achieve command execution. The NVD record rates it high at CVSS 8.0; Dell’s own secondary scoring in the same record is lower, at 4.6, reflecting the adjacent-network and low-privilege preconditions.
The Dell advisory DSA-2026-467 is the security update for OpenManage Enterprise, and the NVD affected range ends before 4.8.0, so deployments on 4.8.0 or later are outside the stated affected range. OpenManage Enterprise manages fleets of servers, so command execution in this service is a path toward wider infrastructure compromise, not just a single console.
What to do
- Inventory Dell OpenManage Enterprise deployments and record each version.
- Upgrade to OpenManage Enterprise 4.8.0 or later following the Dell advisory.
- Until upgraded, restrict OpenManage Enterprise network access to trusted management networks and low privileged accounts only.
- Review OpenManage Enterprise logs for unusual requests or commands from low privileged accounts.
- Verify the deployed version after upgrading.
Management note
This is a management-plane flaw: the system that administers servers becomes the attack path into them. Patch the management console with the same urgency as the servers it manages, and keep it off any network segment a low privileged user can reach.