Error Handling Flaw in Altair Grid Engine from Vendor Altair

CVE-2025-40760

What is CVE-2025-40760?

A vulnerability has been discovered in Altair Grid Engine that improperly handles error messages during user authentication processes. This flaw allows local attackers to gain access to sensitive password hash information used for privileged accounts. By exploiting this weakness, attackers can extract these hashes and potentially perform offline brute-force attacks, posing a significant security risk to the affected systems.

References