Incorrect permission of environment variable (CVE-2025-1950) affects Power HMC
Two critical privilege escalation vulnerabilities—CVE-2025-1950 and CVE-2025-1951—have been identified in IBM Hardware Management Console (HMC) for Power Systems. These flaws allow local users to execute commands with elevated privileges.