Summary
CVE-2026-81475 is a Missing Authentication for Critical Function vulnerability (CWE-306) affecting Dell OpenManage Server Administrator (OMSA) Managed Node components running versions prior to 11.1.0.3. An unauthenticated, remote attacker who can reach an exposed OMSA service could exploit this flaw to achieve remote code execution on the underlying server. The issue carries a CVSS v3.1 base score of 8.1 (High).
Technical details
- Root cause: A critical function within OMSA’s Managed Node service does not enforce authentication before processing attacker-supplied input, allowing an unauthenticated party to reach functionality that should require credentials.
- Trigger conditions: The attack requires high attack complexity (AC:H), meaning the attacker must satisfy specific preconditions or timing/configuration circumstances beyond simply sending a request, but no privileges (PR:N) or user interaction (UI:N) are needed.
- Attack vector: Network-based (AV:N) — exploitation is possible over the network without local access to the host.
- Impact: Successful exploitation can lead to full compromise of confidentiality, integrity, and availability (C:H/I:H/A:H) of the affected system, up to and including remote code execution.
Affected software
- Dell OpenManage Server Administrator (OMSA) Managed Node (Patch) for Windows — versions prior to 11.1.0.3
- Dell OpenManage Server Administrator Managed Node for RHEL 8.10 — versions prior to 11.1.0.3
- Dell OpenManage Server Administrator Managed Node for RHEL 9.4 — versions prior to 11.1.0.3
- Dell OpenManage Server Administrator Managed Node for SLES 15 — versions prior to 11.1.0.3
- Dell OpenManage Server Administrator Managed Node for Ubuntu 22.04 — versions prior to 11.1.0.3
Severity
- CVSS v3.1 Base Score: 8.1 (High)
- Vector:
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Mitigation and recommended actions
- Immediate: Upgrade all affected Dell OpenManage Server Administrator Managed Node installations (Windows, RHEL 8.10, RHEL 9.4, SLES 15, and Ubuntu 22.04 platforms) to version 11.1.0.3 or later, obtained directly from Dell’s official support/download portal.
- If immediate patching is not possible: Restrict network access to the OMSA management service (typically listening on TCP 1311) to trusted management networks only, using firewall rules or network segmentation, and disable or remove OMSA on hosts where it is not actively required until the update can be applied.