File Path Manipulation Flaw in NVIDIA Slurm
CVE-2026-65107

6.3MEDIUM

Key Information:

Vendor

Nvidia
Status
Slurm
Vendor
CVE Published:
3 November 2026

What is CVE-2026-65107?

NVIDIA Slurm is affected by a vulnerability that allows users to manipulate the supplemental group list during the sbcast file transmission process. This flaw can potentially enable unauthorized file writes to restricted paths that users typically should not be able to access, posing a significant risk to system integrity and data security.

Affected Version(s)

Slurm 25.05.0 through 25.05.8

Slurm 25.11.0 through 25.11.7

Slurm 26.05.0 through 26.05.3

References

https://nvd.nist.gov/vuln/detail/CVE-2026-65107
https://www.cve.org/CVERecord?id=CVE-2026-65107

CVSS V3.1

Score:
6.3
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.