{"id":"CVE-2026-65140","kind":"vulnerability","aliases":["CVE-2026-65140"],"related":[],"title":"NVIDIA Slurm: Operator accounts can escalate themselves to Administrator","description":"NVIDIA Slurm contains some inconsistent authorization checks against the Operator permission level in the SlurmDBD that can be chained together in a way that would permit an Operator to make themselves an Administrator.","summary":"Slurm's database daemon (SlurmDBD) has inconsistent authorization checks for the Operator permission level. Chained together, these let an Operator grant themselves Administrator rights.","severity":"medium","cvss":5.7,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["hpc","infrastructure","slurm","slurmdbd"],"not_affected_if":["no-operator-accounts","no-slurmdbd"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-03T16:17:35+00:00","first_seen_at":"2026-11-03T16:21:45+00:00","triaged_at":"2026-11-03T16:24:12+00:00","updated_at":"2026-11-03T16:24:12+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-03T16:24:12Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"NVIDIA Slurm: Operator accounts can escalate themselves to Administrator","impact":"medium","summary":"Slurm's database daemon (SlurmDBD) has inconsistent authorization checks for the Operator permission level. Chained together, these let an Operator grant themselves Administrator rights.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["slurm","hpc","slurmdbd"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"Operator account gains Administrator rights over the Slurm database.","analyst_note":"Find the affected and fixed Slurm versions and the NVIDIA security bulletin; the NVD entry gives neither.","how_to_check":"- unknown","plain_action":"","needs_analyst":true,"not_affected_if":["no-slurmdbd","no-operator-accounts"],"who_is_affected":"Teams running Slurm workload managers with SlurmDBD accounting enabled and Operator-level accounts defined are the ones exposed. Sites that do not use SlurmDBD, or that have no Operator accounts, are not affected by the description given. The sources do not state the affected versions.","user_interaction":"no","needs_special_setup":"yes","severity_if_unknown":"medium"},"cost_usd":0.00065,"input_tokens":4162,"output_tokens":468,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':11A,14A '-65140':12A,15A 'account':4A 'administr':9A,42B,76C 'author':27B,49C 'chain':34B,62C 'check':28B,50C 'contain':46C 'cve':10A,13A 'daemon':23B 'databas':22B 'escal':6A 'grant':40B 'hpc':16B 'inconsist':26B,48C 'infrastructur':17B 'let':37B 'level':33B,55C 'make':73C 'nvidia':1A,44C 'oper':3A,31B,39B,53C,71C 'permiss':32B,54C 'permit':69C 'right':43B 'slurm':2A,18B,20B,45C 'slurmdbd':19B,24B,58C 'togeth':35B,63C 'way':66C 'would':68C","nicknames":[],"mitigations":[],"who_affected":"Teams running Slurm workload managers with SlurmDBD accounting enabled and Operator-level accounts defined are the ones exposed. Sites that do not use SlurmDBD, or that have no Operator accounts, are not affected by the description given. The sources do not state the affected versions.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["hpc","infrastructure","medium","slurm","slurmdbd"],"campaign_type":null,"first_public_at":"2026-10-28T15:19:22+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N","cvss_by":"psirt@nvidia.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-65140","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-65140","severity":null,"published_at":"2026-11-03T16:17:35+00:00","modified_at":"2026-11-03T16:17:35+00:00","first_seen_at":"2026-11-03T16:21:45+00:00","fetched_at":"2026-11-03T16:21:45+00:00","note":null}],"documents":[{"id":27284,"url":"https://docs.cloud.google.com/support/bulletins/index#gcp-2026-062","title":"Google Cloud Security Bulletins: GCP-2026-062: Published: 2026-09-11 Description Description Severity Notes Multiple security vulnerabilities were discovered in Slurm that affect Cluster ","kind":"vendor","source":"vendor","publisher":null,"text":"GCP-2026-062\n\nPublished: 2026-09-11 Description Description Severity Notes Multiple security vulnerabilities were discovered in Slurm that affect Cluster Toolkit blueprints that reference specific image versions. These vulnerabilities affect the slurmstepd daemon, RPC request handling, and the accounting database. What should I do? For instructions and more details, see the Cluster Toolkit security bulletin . High CVE-2026-65107 CVE-2026-65108 CVE-2026-65109 CVE-2026-65138 CVE-2026-65139 CVE-2026-65140 CVE-2026-65165 CVE-2026-65168","published_at":"2026-10-28T15:19:22+00:00","relation":"mentions","confidence":null,"note":null}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}