Skip to main content

SLURM slurmstepd CVE-2026-65108

MEDIUM
2026-09-03 vendor:ubuntu
Share

Severity by source

vuln.today AI
9.9 CRITICAL

Job submission is network-reachable (AV:N), requires authenticated SLURM user (PR:L), no interaction needed, and slurmstepd privilege escalation changes scope (S:C) with full node compromise.

3.1 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Lifecycle Timeline

1
Analysis Generated
Sep 04, 2026 - 11:10 vuln.today

DescriptionCVE.org

[Fix a slurmstepd stack overflow when a job environment contains an oversized SPANK option variable]

AnalysisAI

Stack-based buffer overflow in slurmstepd, the SLURM job step daemon, can be triggered by an authenticated cluster user who submits a job containing an oversized SPANK (SLURM Plug-in Architecture for Node and job Control) option variable in the job environment. Because slurmstepd typically executes with elevated privileges on compute nodes, successful exploitation could allow a regular SLURM user to achieve privilege escalation or arbitrary code execution on cluster nodes. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
technique details hidden
Delivery
technique details hidden
Exploit
technique details hidden
Execution
technique details hidden
Persist
technique details hidden
Impact
technique details hidden

Vulnerability AssessmentAI

Exploitation Exploitation requires an account with SLURM job submission rights on an affected cluster - that is, a user who can run sbatch, srun, or equivalent SLURM submission commands. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The real-world risk is significant in HPC environments despite the absence of a CVSS score, KEV listing, and public exploit. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation Apply the Ubuntu-issued security update for the SLURM packages (slurm-wlm, slurmctld, slurmd, slurmstepd) as soon as it is published via Ubuntu's security notices (USN). … Detailed patch versions, workarounds, and compensating controls in full report.

Threat intelligence, references, and detailed analysis are available after sign-in.

Share

CVE-2026-65108 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy