SQL Injection Vulnerability in NVIDIA Slurm Database Management System
CVE-2026-65139

6.3MEDIUM

Key Information:

Vendor

Nvidia
Status
Slurm
Vendor
CVE Published:
3 November 2026

What is CVE-2026-65139?

The SQL injection vulnerability in NVIDIA's SlurmDBD component allows attackers to exploit RPCs, potentially leading to the execution of arbitrary code. By manipulating SQL queries, an attacker can gain unauthorized access and compromise the system, emphasizing the need for immediate attention and mitigation strategies.

Affected Version(s)

Slurm 25.05.0 through 25.05.8

Slurm 25.11.0 through 25.11.7

Slurm 26.05.0 through 26.05.3

References

https://nvd.nist.gov/vuln/detail/CVE-2026-65139
https://www.cve.org/CVERecord?id=CVE-2026-65139

CVSS V3.1

Score:
6.3
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.