Symlink Resolution Issue in NVIDIA Slurm Affects File Security
CVE-2026-65109

4.7MEDIUM

Key Information:

Vendor

Nvidia

Status
Vendor
CVE Published:
3 November 2026

What is CVE-2026-65109?

NVIDIA Slurm has an existing symlink resolution problem in its container cleanup code. This vulnerability could be exploited by an attacker to manipulate file removal processes, potentially enabling them to delete or alter files outside their authorized context on a compute node. This may lead to unintended data loss or service disruptions, raising significant concerns for systems using NVIDIA Slurm for workload management.

Affected Version(s)

Slurm 25.05.0 through 25.05.8

Slurm 25.11.0 through 25.11.7

Slurm 26.05.0 through 26.05.3

References

CVSS V3.1

Score:
4.7
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.