EGI SVG Advisories

Advisory-EGI-SVG-2026-42

HIGH risk Multiple SLURM vulnerabilities

Date: 2026-09-08

Updated: 2026-10-13

DESCRIPTION

SLURM has released versions 26.05.4, 25.11.8, and 25.05.9 fixing
various vulnerabilities, at least one (CVE-2026-65140) might result
in privilege escalation, see [R 1].

IDs AND CVSS SCORE

EGI SVG ID : EGI-SVG-2026-42

CVE ID : CVE-2026-65107, CVE-2026-65108, CVE-2026-65109,
CVE-2026-65138, CVE-2026-65139, CVE-2026-65140, CVE-2026-65165,
CVE-2026-65168

CVSS Score : Not available

• EGI SVG: HIGH

ACTIONS REQUIRED/RECOMMENDED

Sites are recommended to update relevant components as soon as possible
using information on the SLURM release site in the reference below.

STATUS OF THIS ADVISORY

TLP:CLEAR information - Unlimited distribution

This advisory will be made public on or after 2026-10-07 at

https://advisories.egi.eu/Advisory-EGI-SVG-2026-42

https://advisories.egi.eu/Advisory-SVG-CVE-2026-6514

CONTACT AND OTHER INFORMATION ON SVG

---

This advisory is subject to the Creative Commons licence 
https://creativecommons.org/licenses/by/4.0/ and
the EGI (https://www.egi.eu/) Software Vulnerability Group 
must be credited. ----

Comments or questions should be sent to svg-rat at mailman.egi.eu

Vulnerabilities relevant for EGI can be reported at report-vulnerability at egi.eu

(see [R 99] for further details, and other information on SVG)

REFERENCES

• [R 1] https://lists.schedmd.com/mailman3/hyperkitty/list/slurm-announce@lists.schedmd.com/thread/3YAYJNR6YFN6NLR3S5GVOI6BOTMEZUG5/

• [R 2] https://github.com/SchedMD/slurm/releases

• [R 99] https://confluence.egi.eu/display/EGIBG/SVG+Advisories

CREDITS

SVG was alerted to this vulnerability by Barbara Krasovec

This site is open source. Improve this page.