Access Control Vulnerability in NVIDIA Slurm Affects Compute Nodes
CVE-2026-65165

5.3MEDIUM

Key Information:

Vendor

Nvidia
Status
Slurm
Vendor
CVE Published:
3 November 2026

What is CVE-2026-65165?

NVIDIA Slurm has a vulnerability that allows a user to manipulate the provided nodelist in conjunction with the --distribution=arbitrary option. This exploitation could permit unauthorized access to compute nodes that are outside the user's current job allocation, potentially compromising the security and integrity of the compute environment.

Affected Version(s)

Slurm 25.05.0 through 25.05.8

Slurm 25.11.0 through 25.11.7

Slurm 26.05.0 through 26.05.3

References

https://nvd.nist.gov/vuln/detail/CVE-2026-65165
https://www.cve.org/CVERecord?id=CVE-2026-65165

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.