CVE-2026-65109 PUBLISHED

Assigner: nvidia
Reserved: 21.07.2026 Published: 03.11.2026 Updated: 03.11.2026

NVIDIA Slurm is subject to a symlink resolution issue in the container cleanup code that could allow an attacker to remove files outside of their control on the compute node.

Metrics

CVSS 3.1

CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N
CVSS Score: 4.7

Attack Vector	Local	Scope	Unchanged
Attack Complexity	High	Confidentiality Impact	None
Privileges Required	Low	Integrity Impact	High
User Interaction	None	Availability Impact	None

CVSS 3.1

Product Status

Vendor	NVIDIA
Product	Slurm
Versions	Default: unaffected Version 25.05.0 through 25.05.8 is affected Version 25.11.0 through 25.11.7 is affected Version 26.05.0 through 26.05.3 is affected

References

https://nvd.nist.gov/vuln/detail/CVE-2026-65109
https://www.cve.org/CVERecord?id=CVE-2026-65109

Problem Types

CWE-61 UNIX Symbolic Link (Symlink) Following CWE

Impacts

Data tampering