---
id: "CVE-2026-65210"
kind: "vulnerability"
aliases: ["CVE-2026-65210"]
title: "BMC firmware: authenticated IPMI administrator can read arbitrary files"
severity: "medium"
cvss: 4.9
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["bmc", "infrastructure", "ipmi", "self-hosted", "servers"]
not_affected_if: ["no-bmc", "no-ipmi"]
published_at: "2026-10-27T08:16:54+00:00"
first_seen_at: "2026-10-27T08:31:47+00:00"
updated_at: "2026-10-27T08:32:36+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-65210", "first_seen_at": "2026-10-27T08:31:47+00:00"}]
---

# BMC firmware: authenticated IPMI administrator can read arbitrary files

An authenticated IPMI administrator can read arbitrary files from the BMC (baseboard management controller) filesystem. This discloses material beyond what the IPMI management role should reach.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-10-27T08:31:47+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-65210

## From the sources

This issue may allow an authenticated IPMI Administrator to read arbitrary files from the BMC filesystem, disclosing material well beyond the intended IPMI management role.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_