---
id: "CVE-2026-113696"
kind: "vulnerability"
aliases: ["CVE-2026-113696"]
title: "BMC ITSM SmartIT: authenticated users can bypass change approval restrictions"
severity: "medium"
cvss: 5.3
epss: null
exploited: false
status: "open"
category: "other"
products: []
ecosystems: []
tags: ["bmc", "change-management", "itsm", "other", "smartit"]
not_affected_if: ["no-smartit-change-approval", "no-user-accounts-exposed", "other-versions"]
published_at: "2026-10-29T14:17:45+00:00"
first_seen_at: "2026-10-29T14:25:22+00:00"
updated_at: "2026-10-29T14:26:09+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-113696", "first_seen_at": "2026-10-29T14:25:22+00:00"}]
---

# BMC ITSM SmartIT: authenticated users can bypass change approval restrictions

BMC IT Service Management Suite's SmartIT change approval feature does not check authorization properly. A logged-in user can change approval state and get around intended approval restrictions.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Confirm whether the BMC IT Service Management Suite (SmartIT) is deployed, and note its version against `25.3.01`, `25.4.01` and `26.1.01`

## Timeline

- 2026-10-29T14:25:22+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-113696

## From the sources

Improper authorization in the SmartIT change approval feature of BMC IT Service Management Suite versions 25.3.01, 25.4.01, and 26.1.01 allows authenticated users to make unauthorized changes to approval state and bypass intended approval restrictions.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_