CVE-2026-65199

Name of the Vulnerable Software and Affected Versions openUBMC (affected versions not specified)

Description The software assigns a full privilege set to pseudo-identities used by SNMP callers. This allows an authenticated user with low privileges to execute mapped backend operations with administrative authority. The issue occurs in route mapper/account.lua within the get user privilege() function, which returns a complete nine-privilege set for the special users group, including the SNMPv1 v2c pseudo-user.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.