CVE-2026-65168High 7.0NVIDIA Slurm contains an attacker-controlled heap-based buffer overflow in the slurmstepd socket handling code.0.1%
CVE-2026-65165Medium 5.3NVIDIA Slurm contains a vulnerability where a user could deliberately alter the provided nodelist alongside the --distribution=arbitrary option to gain access to compute nodes outside of the current j0.1%
CVE-2026-65140Medium 5.7NVIDIA Slurm contains some inconsistent authorization checks against the Operator permission level in the SlurmDBD that can be chained together in a way that would permit an Operator to make themselve0.1%
CVE-2026-65139Medium 6.3NVIDIA Slurm contains an attacker-controlled SQL injection attack in certain SlurmDBD RPCs that can lead to arbitrary code execution.0.2%
CVE-2026-65138Medium 6.3NVIDIA Slurm contains an attacker-controlled arbitrary-memory read in the slurmstepd socket API that could be used to ex-filtrate authentication keys.0.1%
CVE-2026-65109Medium 4.7NVIDIA Slurm is subject to a symlink resolution issue in the container cleanup code that could allow an attacker to remove files outside of their control on the compute node.0.1%
CVE-2026-65108Medium 6.3NVIDIA Slurm contains an attacker-controlled heap-based buffer overflow in the slurmstepd process while the slurmstepd is running with root permissions.0.1%
CVE-2026-65107Medium 6.3NVIDIA Slurm contains a vulnerability where a user could alter the supplemental group list as part of an sbcast file transmission to write a file to a path they would not normally have access to.0.1%