Slurm vulnerabilities and CVEs

Known vulnerabilities affecting Slurm, with exploit availability attached to each one, so you can tell a flaw someone has written code for from one nobody has.

8 vulnerabilities tracked.

• 7.0 NVIDIA Slurm contains an attacker-controlled heap-based buffer overflow in the slurmstepd socket handling code. CVE-2026-65168 3 Nov 2026
• 6.3 NVIDIA Slurm contains an attacker-controlled SQL injection attack in certain SlurmDBD RPCs that can lead to arbitrary code execution. CVE-2026-65139 3 Nov 2026
• 6.3 NVIDIA Slurm contains an attacker-controlled arbitrary-memory read in the slurmstepd socket API that could be used to ex-filtrate… CVE-2026-65138 3 Nov 2026
• 6.3 NVIDIA Slurm contains an attacker-controlled heap-based buffer overflow in the slurmstepd process while the slurmstepd is running with root… CVE-2026-65108 3 Nov 2026
• 6.3 NVIDIA Slurm contains a vulnerability where a user could alter the supplemental group list as part of an sbcast file transmission to write… CVE-2026-65107 3 Nov 2026
• 5.7 NVIDIA Slurm contains some inconsistent authorization checks against the Operator permission level in the SlurmDBD that can be chained… CVE-2026-65140 3 Nov 2026
• 5.3 NVIDIA Slurm contains a vulnerability where a user could deliberately alter the provided nodelist alongside the --distribution=arbitrary… CVE-2026-65165 3 Nov 2026
• 4.7 NVIDIA Slurm is subject to a symlink resolution issue in the container cleanup code that could allow an attacker to remove files outside of… CVE-2026-65109 3 Nov 2026