Arbitrary Memory Read Vulnerability in NVIDIA Slurm Socket API
CVE-2026-65138

6.3MEDIUM

Key Information:

Vendor

Nvidia

Status
Vendor
CVE Published:
3 November 2026

What is CVE-2026-65138?

A security issue in NVIDIA's Slurm involves an arbitrary-memory read vulnerability within the slurmstepd socket API. Exploiting this flaw can allow attackers to gain unauthorized access to sensitive information, such as authentication keys, thereby compromising the integrity of the system and potentially leading to further exploits. It is essential for users of Slurm to apply security updates and review their system settings to mitigate this risk.

Affected Version(s)

Slurm 25.05.0 through 25.05.8

Slurm 25.11.0 through 25.11.7

Slurm 26.05.0 through 26.05.3

References

CVSS V3.1

Score:
6.3
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.