CVE-2026-65108

MEDIUM 6.3

CVSS Score

6.3

EPSS Score

0.0%

EPSS Percentile

0th

NVIDIA Slurm contains an attacker-controlled heap-based buffer overflow in the slurmstepd process while the slurmstepd is running with root permissions.

CWE	CWE-122
Vendor	nvidia
Product	slurm
Published	Nov 3, 2026

Stay Ahead of the Next One

Get instant alerts for nvidia slurm

Be the first to know when new medium vulnerabilities affecting nvidia slurm are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

Attack Vector

Local

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

None

Affected Versions

NVIDIA / Slurm

25.05.0 through 25.05.8 25.11.0 through 25.11.7 26.05.0 through 26.05.3

References

NVD ↗ CVE.org ↗ EPSS Data ↗

nvd.nist.gov: https://nvd.nist.gov/vuln/detail/CVE-2026-65108 cve.org: https://www.cve.org/CVERecord?id=CVE-2026-65108