DSA-2026-358: Security Update for Dell OpenManage Python SDK (omsdk) Vulnerability
Summary: Dell Open Manage Python SDK (omsdk) remediation is available for a security vulnerability that could be exploited by malicious users to compromise the affected system.
This article applies to
This article does not apply to
This article is not tied to any specific product.
Not all product versions are identified in this article.
Impact
High
Details
| Proprietary Code CVEs | Description | CVSS Base Score | CVSS Vector String |
| CVE-2026-68864 | Dell Open Manage Python SDK (omsdk) contains an improper TLS certificate validation issue in the redfish_operation execution path. The SDK exposes a verify_ssl configuration option intended to control certificate validation. However, WsManProtocolBase.redfish_operation ignores this setting and unconditionally disables certificate validation by passing verify=False to the underlying HTTP request. As a result, an operator explicitly enabling TLS verification with verify_ssl=True still performs Redfish communication without certificate validation. | 7.5 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|
| Proprietary Code CVEs | Description | CVSS Base Score | CVSS Vector String |
| CVE-2026-68864 | Dell Open Manage Python SDK (omsdk) contains an improper TLS certificate validation issue in the redfish_operation execution path. The SDK exposes a verify_ssl configuration option intended to control certificate validation. However, WsManProtocolBase.redfish_operation ignores this setting and unconditionally disables certificate validation by passing verify=False to the underlying HTTP request. As a result, an operator explicitly enabling TLS verification with verify_ssl=True still performs Redfish communication without certificate validation. | 7.5 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|
Affected Products & Remediation
| Product | Affected Versions | Remediated Versions | Link |
|---|---|---|---|
| Dell Open Manage Python SDK (omsdk) | Versions prior to 1.2.519 |
Version 1.2.519 or later
|
Support Page |
| Product | Affected Versions | Remediated Versions | Link |
|---|---|---|---|
| Dell Open Manage Python SDK (omsdk) | Versions prior to 1.2.519 |
Version 1.2.519 or later
|
Support Page |
Workarounds & Mitigations
None
Revision History
"
| Revision | Date | Description |
|---|---|---|
| 1.0 | 2026-09-02 | Initial Release |
Acknowledgements
Dell would like to thank Rudra_16 for reporting this issue.
Related Information
Legal Disclaimer
Affected Products
OpenManage Ansible ModulesArticle Properties
Article Number: 000505139
Article Type: Dell Security Advisory
Last Modified: 02 Sept 2026
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.