Elevation of Privilege in HPE Cray Programming Environment
CVE-2026-44875

7.8HIGH

Key Information:

Vendor

HP (HP)

Status
HP Cray Programming Environment
Vendor
CVE Published:
5 November 2026

What is CVE-2026-44875?

The HPE Cray Programming Environment versions 25.03 and 25.09, prior to version 26.03, contain a flaw in the deployment method on HPCM. This vulnerability may permit a local unprivileged user to gain elevated access, potentially allowing them to perform unauthorized actions within the system. It is crucial for users to upgrade to the latest version to mitigate this risk.

Affected Version(s)

HPE Cray Programming Environment 25.03

HPE Cray Programming Environment 25.09

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpe...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.