Live › vulnerability › CVE-2026-65140
Slurm's database daemon (SlurmDBD) has inconsistent authorization checks for the Operator permission level. Chained together, these let an Operator grant themselves Administrator rights.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 16:21 UTC. All times on this page are UTC.
Teams running Slurm workload managers with SlurmDBD accounting enabled and Operator-level accounts defined are the ones exposed. Sites that do not use SlurmDBD, or that have no Operator accounts, are not affected by the description given. The sources do not state the affected versions.
No product ranges from the sources yet.
Unknown from the sources.
No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
NVIDIA Slurm contains some inconsistent authorization checks against the Operator permission level in the SlurmDBD that can be chained together in a way that would permit an Operator to make themselves an Administrator.
This page as .md · .json · in your agent: get_signal("CVE-2026-65140")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.