Path Hijacking Vulnerability in Altair Grid Engine by Siemens

CVE-2025-40763

What is CVE-2025-40763?

A significant vulnerability has been identified in Altair Grid Engine that affects all versions prior to V2026.0.0. The flaw arises from improper validation of environment variables during the loading of shared libraries. This oversight enables malicious actors to perform path hijacking by substituting libraries with their own malicious versions. Consequently, a local attacker could exploit this vulnerability to execute arbitrary code with elevated superuser privileges by manipulating the environment variables and placing a rogue library in the controlled path.

References