NVIDIA Slurm vulnerabilities

Newest CVEs

• CVE-2026-65168

  NVIDIA Slurm contains an attacker-controlled heap-based buffer overflow in the slurmstepd socket handling code.

  NVIDIA · Slurm

  High7.0
• CVE-2026-65165

  NVIDIA Slurm contains a vulnerability where a user could deliberately alter the provided nodelist alongside the --distribution=arbitrary option to gain access…

  NVIDIA · Slurm

  Medium5.3
• CVE-2026-65140

  NVIDIA Slurm contains some inconsistent authorization checks against the Operator permission level in the SlurmDBD that can be chained together in a way that…

  NVIDIA · Slurm

  Medium5.7
• CVE-2026-65139

  NVIDIA Slurm contains an attacker-controlled SQL injection attack in certain SlurmDBD RPCs that can lead to arbitrary code execution.

  NVIDIA · Slurm

  Medium6.3
• CVE-2026-65138

  NVIDIA Slurm contains an attacker-controlled arbitrary-memory read in the slurmstepd socket API that could be used to ex-filtrate authentication keys.

  NVIDIA · Slurm

  Medium6.3
• CVE-2026-65109

  NVIDIA Slurm is subject to a symlink resolution issue in the container cleanup code that could allow an attacker to remove files outside of their control on…

  NVIDIA · Slurm

  Medium4.7
• CVE-2026-65108

  NVIDIA Slurm contains an attacker-controlled heap-based buffer overflow in the slurmstepd process while the slurmstepd is running with root permissions.

  NVIDIA · Slurm

  Medium6.3
• CVE-2026-65107

  NVIDIA Slurm contains a vulnerability where a user could alter the supplemental group list as part of an sbcast file transmission to write a file to a path…

  NVIDIA · Slurm

  Medium6.3