Privilege Escalation Vulnerability in openUBMC by Huawei
CVE-2026-65199

5.4MEDIUM

Key Information:

Vendor

Huawei
Status
Openbmc
Vendor
CVE Published:
13 October 2026

What is CVE-2026-65199?

The openUBMC software by Huawei has a vulnerability that allows authenticated low-privilege SNMP users to gain administrative privileges. This occurs because the system assigns full privileges to pseudo-identities for SNMP callers. Specifically, the function in route_mapper/account.lua, get_user_privilege, incorrectly grants the complete privilege set to a special users group, which includes the SNMPv1_v2c pseudo-user. As a result, these users could execute backend operations that compromise the security of the entire system.

Affected Version(s)

openBMC 0 <= 26.06

References

https://www.runzero.com/advisories/huawei-openUBMC-snmp-p...
third-party-advisory

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

HD Moore of runZero
Tod Beardsley of runZero
.