CVE-2026-7868 is an authorization vulnerability in IBM OPENBMC firmware versions FW1110.00 to FW1110.20 and FW1060.00 to FW1060.71. The flaw allows users with ReadOnly access to escalate their privileges to administrator, violating proper authorization controls. The vulnerability is identified as CWE-863. The CVSS 3.1 vector indicates the attack requires network access with low complexity, privileges required are low (ReadOnly user), no user interaction is needed, and the impact is on integrity only, with no confidentiality or availability impact. No patch or official remediation level has been disclosed by IBM as of the publication date.

An attacker with ReadOnly user privileges can escalate to administrator privileges, potentially allowing unauthorized administrative actions on the affected IBM OPENBMC firmware versions. This compromises the integrity of the system but does not affect confidentiality or availability according to the CVSS vector. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict ReadOnly user access to trusted personnel only and monitor for unusual privilege escalation attempts. Avoid granting ReadOnly access to untrusted users.