Severity by source
Network job submission (AV:N), requires cluster account (PR:L), scope change as host files outside spool are deleted (S:C), integrity impact high, availability low from file deletion.
Lifecycle Timeline
1DescriptionCVE.org
[Fix slurmstepd removing files outside the container spool directory when cleaning up an OCI containe, Fix slurmstepd leaving OCI container spool directories behind when ContainerPath contains a task id pattern]
AnalysisAI
Path traversal during OCI container cleanup in Slurm's slurmstepd daemon allows files outside the designated container spool directory to be deleted on the host compute node. Affected clusters are those using Slurm's OCI container support; the bug manifests during job-step teardown, meaning any cluster user who can submit OCI-containerized jobs can trigger deletion of arbitrary files on the compute node. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | OCI container support must be enabled in slurm.conf (ContainerPath and related OCI directives must be configured). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | No vendor-provided CVSS vector is available, so risk must be inferred entirely from the description. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the patch referenced in the Ubuntu vendor report, which includes two fixes: constraining slurmstepd's OCI container cleanup to delete only files within the designated container spool directory, and correcting the spool-directory removal logic when ContainerPath contains a task ID pattern. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today