Live › vulnerability › CVE-2026-65138
NVIDIA Slurm's slurmstepd socket API has an arbitrary-memory read that an attacker controls. The sources say it could be used to exfiltrate authentication keys.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 16:21 UTC. All times on this page are UTC.
Teams running Slurm workload managers on Linux clusters are the ones to look at. The sources do not say which Slurm versions are affected or what configuration makes the socket API reachable. unknown
No product ranges from the sources yet.
Unknown from the sources.
No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
NVIDIA Slurm contains an attacker-controlled arbitrary-memory read in the slurmstepd socket API that could be used to ex-filtrate authentication keys.
This page as .md · .json · in your agent: get_signal("CVE-2026-65138")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.