Authorization Check Flaws in NVIDIA Slurm Affecting Operator Permissions
CVE-2026-65140

5.7MEDIUM

Key Information:

Vendor

Nvidia
Status
Slurm
Vendor
CVE Published:
3 November 2026

What is CVE-2026-65140?

NVIDIA's Slurm exhibits a critical flaw where inconsistent authorization checks within the SlurmDBD can be exploited. Operators can manipulate these checks to escalate their privileges, effectively granting themselves Administrator status. This vulnerability can significantly compromise the integrity of system operations and administrative controls if not addressed.

Affected Version(s)

Slurm 25.05.0 through 25.05.8

Slurm 25.11.0 through 25.11.7

Slurm 26.05.0 through 26.05.3

References

https://nvd.nist.gov/vuln/detail/CVE-2026-65140
https://www.cve.org/CVERecord?id=CVE-2026-65140

CVSS V3.1

Score:
5.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.