Live › vulnerability › CVE-2026-65139
NVIDIA Slurm, a workload scheduler used on compute clusters, has an SQL injection flaw in certain SlurmDBD remote procedure calls. An attacker who can send those calls can inject SQL and, according to the description, execute arbitrary code.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 16:21 UTC. All times on this page are UTC.
Teams that run Slurm with the SlurmDBD accounting daemon, typically HPC and research clusters. Sites without SlurmDBD, or where the database RPC interface is not reachable by untrusted users, are less exposed. Sources do not state affected versions or the exact preconditions.
No product ranges from the sources yet.
Unknown from the sources.
No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
NVIDIA Slurm contains an attacker-controlled SQL injection attack in certain SlurmDBD RPCs that can lead to arbitrary code execution.
This page as .md · .json · in your agent: get_signal("CVE-2026-65139")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.