Supermicro BMC IPMI feature contains a Privilege escalation vulnerability

Summary

A logic flaw in the BMC IPMI implementation may allow an attacker to send specially crafted RAKP+ messages and escalate an account to administrator privileges.

Remediation

1. Inventory every SMCI MBD-X12SPI deployment, including staging.
2. No fixed version appears in the public sources yet. Check the references below and the vendor directly.

References

• Referencehttps://www.supermicro.com/en/support/security_BMC_IPMI_Oct_2026_1