CVE-2026-8058 affects IBM OPENBMC firmware versions FW1110.00 to FW1110.20 and FW1060.00 to FW1060.71. When a user supplies a password with a resource dump request, the password is recorded in the BMC audit log. Since the audit log can be viewed by admin users, this results in exposure of sensitive information. The vulnerability does not affect integrity or availability but impacts confidentiality. No official remediation or patch information is currently available.

The vulnerability allows sensitive password information to be exposed in audit logs accessible by admin users. This could lead to unauthorized disclosure of credentials if audit logs are accessed by unauthorized personnel or if admin accounts are compromised. There is no indication of impact on system integrity or availability. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, limit access to BMC audit logs to trusted administrators only and avoid supplying passwords in resource dump requests if possible.