Live › vulnerability › CVE-2026-65109
NVIDIA Slurm's container cleanup code resolves symlinks unsafely. An attacker with access to a compute node can remove files outside the paths they control.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 16:21 UTC. All times on this page are UTC.
Teams running NVIDIA Slurm compute nodes with container cleanup in use are exposed. The sources do not name the affected version ranges or whether a local user is required, so the NVD entry is the place to confirm.
No product ranges from the sources yet.
sinfo --version or slurmd -V on compute nodes; compare against the ranges in the NVD entry.No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
NVIDIA Slurm is subject to a symlink resolution issue in the container cleanup code that could allow an attacker to remove files outside of their control on the compute node.
This page as .md · .json · in your agent: get_signal("CVE-2026-65109")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.