NVIDIA Slurm
7 CVEs affecting NVIDIA Slurm. Latest disclosed: 2026-11-03. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-65168 | High | 7.0 | 2026-11-03 | NVIDIA Slurm contains an attacker-controlled heap-based buffer overflow in the slurmstepd socket handling code. |
CVE-2026-65139 | Medium | 6.3 | 2026-11-03 | NVIDIA Slurm contains an attacker-controlled SQL injection attack in certain SlurmDBD RPCs that can lead to arbitrary code execution. |
CVE-2026-65138 | Medium | 6.3 | 2026-11-03 | NVIDIA Slurm contains an attacker-controlled arbitrary-memory read in the slurmstepd socket API that could be used to ex-filtrate authentication keys. |
CVE-2026-65108 | Medium | 6.3 | 2026-11-03 | NVIDIA Slurm contains an attacker-controlled heap-based buffer overflow in the slurmstepd process while the slurmstepd is running with root permissions. |
CVE-2026-65140 | Medium | 5.7 | 2026-11-03 | NVIDIA Slurm contains some inconsistent authorization checks against the Operator permission level in the SlurmDBD that can be chained together in a way that w… |
CVE-2026-65165 | Medium | 5.3 | 2026-11-03 | NVIDIA Slurm contains a vulnerability where a user could deliberately alter the provided nodelist alongside the --distribution=arbitrary option to gain access… |
CVE-2026-65109 | Medium | 4.7 | 2026-11-03 | NVIDIA Slurm is subject to a symlink resolution issue in the container cleanup code that could allow an attacker to remove files outside of their control on th… |