CVE-2026-85507

A flaw was found in FreeIPMI. A local attacker can exploit a stack-based buffer overflow vulnerability in the ipmi-oem utility when processing the dell get-system-info cmc-info subcommand. This can lead to arbitrary code execution, allowing the attacker to run malicious code on the affected system.

A stack-based buffer overflow in the FreeIPMI ipmi-oem utility can lead to arbitrary code execution when processing the dell get-system-info cmc-info subcommand. This vulnerability is classified as Moderate because the high potential impact (arbitrary code execution) is offset by limited exploitability: an attacker must already possess local access to the system and intentionally execute this specific subcommand to trigger the flaw.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Restrict IPMI and BMC access to a dedicated, trusted management network so ipmi-oem cannot reach untrusted or compromised controllers. Please do not run ipmi-oem dell get-system-info cmc-info against untrusted BMCs. If that Dell CMC query is not required, do not use ipmi-oem against remote management controllers.