EGI SVG Advisories

Advisory-EGI-SVG-2026-47

HTCondor Software Suite (HTCSS) security vulnerability

Date: 2026-10-01

Updated: 2026-11-03

DESCRIPTION

The HT Condor team has fixed a vulnerability which allows privilege escalation. [R 1]

IDs AND CVSS SCORE

EGI SVG ID : EGI-SVG-2026-47

CVE ID : N/A

CVSS Score : N/A

AFFECTED SOFTWARE AND VERSIONS

The Security release/fixed versions of HT Condor are

24.0.24, 24.12.24, 25.0.14, 25.13.3

Previous versions are likely to be vulnerable

ACTIONS REQUIRED/RECOMMENDED

Sites are recommended to update relevant components as soon as possible
using information in the references below.

STATUS OF THIS ADVISORY

TLP:CLEAR information - Unlimited distribution

CONTACT AND OTHER INFORMATION ON SVG

---

This advisory is subject to the Creative Commons licence 
https://creativecommons.org/licenses/by/4.0/ and
the EGI (https://www.egi.eu/) Software Vulnerability Group 
must be credited. ----

Comments or questions should be sent to svg-rat at mailman.egi.eu

Vulnerabilities relevant for EGI can be reported at report-vulnerability at egi.eu

(see [R 99] for further details, and other information on SVG)

REFERENCES

• [R 1] https://htcondor.org/security/vulnerabilities/HTCONDOR-2026-0002.html

• [R 99] https://confluence.egi.eu/display/EGIBG/SVG+Advisories

CREDITS

SVG was alerted to this vulnerability by the HT Condor team

This site is open source. Improve this page.