What is GHSA-246r-j53h-wrm2?

GHSA-246r-j53h-wrm2 is a security advisory published by GitHub Security Advisories with Medium severity. openUBMC assigns the full privilege set to pseudo-identities representing SNMP callers. An...

Which CVE IDs does GHSA-246r-j53h-wrm2 cover?

GHSA-246r-j53h-wrm2 covers the following CVE IDs: CVE-2026-65199. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-246r-j53h-wrm2?

GHSA-246r-j53h-wrm2 has a CVSS v3 base score of 5.4, published by GitHub Security Advisories.

GHSA-246r-j53h-wrm2MediumCVSS 5.4

openUBMC assigns the full privilege set to pseudo-identities representing SNMP callers. An...

Vendor

GitHub Security Advisories

Published

October 13, 2026

Last Modified

October 13, 2026

🔗 CVE IDs covered (1)

CVE-2026-65199 →

📋 Description

openUBMC assigns the full privilege set to pseudo-identities representing SNMP callers. An authenticated, but low-privilege, SNMP user can therefore invoke mapped backend operations as an administrative identity. In route_mapper/account.lua, get_user_privilege returns the complete nine-privilege set for a special_users group that includes the SNMPv1_v2c pseudo-user.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-65199
https://www.runzero.com/advisories/huawei-openUBMC-snmp-privsec-cve-2026-65199
https://github.com/advisories/GHSA-246r-j53h-wrm2