CVE-2026-65109

EUVD-2026-116010
NVIDIA Slurm is subject to a symlink resolution issue in the container cleanup code that could allow an attacker to remove files outside of their control on the compute node.
Symlink
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.7 MEDIUM
LOCAL
HIGH
LOW
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Debian logo
Debian Releases
Debian Product
Codename
slurm-wlm
bookworm
vulnerable
bookworm (security)
vulnerable
forky
26.05.5-1
fixed
sid
26.05.5-1
fixed
trixie
vulnerable
trixie (security)
24.11.5-4+deb13u1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
slurm-wlm
jammy
needs-triage
noble
needs-triage
resolute
needs-triage
stonking
needs-triage