6.3Medium

CVE-2026-65107

NVIDIA Slurm Published: (11 days ago)

Description

NVIDIA Slurm contains a vulnerability where a user could alter the supplemental group list as part of an sbcast file transmission to write a file to a path they would not normally have access to.

Weakness (CWE): CWE-862

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
NVIDIA Slurm 25.05.0 through 25.05.8, 25.11.0 through 25.11.7, 26.05.0 through 26.05.3

References and patches