Vulnerability · Published Nov 11, 2025 · Assigned by siemens
CVE-2025-40763
High 7.8
In plain English
A high-severity uncontrolled search path in Altair Grid Engine from Siemens. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 4% of all known vulnerabilities).
Official description
A vulnerability has been identified in Altair Grid Engine (All versions < V2026.0.0). Affected products do not properly validate environment variables when loading shared libraries, allowing path hijacking through malicious library substitution. This could allow a local attacker to execute arbitrary code with superuser privileges by manipulating the environment variable and placing a malicious library in the controlled path.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Siemens | Altair Grid Engine | 0 – before V2026.0.0 |
Weakness: CWE-427 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H