CVE-2026-65109: Medium severity debian/slurm-wlm vulnerability

Q: Who is exposed to this issue?

Compute nodes running the affected Slurm workload manager software are exposed when slurmstepd performs OCI container cleanup. The issue is in cleanup handling for container spool directories and symlink resolution.

Q: What does an attacker need to exploit it?

The vector is local and requires low privileges, according to the CVSS data. Exploitation has high attack complexity and does not require user interaction.

Q: What is the potential impact?

An attacker could cause slurmstepd to remove files outside the attacker’s control on the compute node. The supplied CVSS vector identifies integrity impact, with no listed confidentiality or availability impact.

Published Nov 3, 2026

Updated

Fix slurmstepd removing files outside the container spool directory when cleaning up an OCI containe, Fix slurmstepd leaving OCI container spool directories behind when ContainerPath contains a task id pattern

Other sources

NVIDIA Slurm is subject to a symlink resolution issue in the container cleanup code that could allow an attacker to remove files outside of their control on the compute node.

— MITRE

Affected Software

4 affected componentsFixes available

debian/slurm-wlm*

debian/slurm-wlm<24.11.5-4+deb13u1

24.11.5-4+deb13u1

debian/slurm-wlm<26.05.4-1

26.05.4-1

debian/slurm-wlm<=22.05.8-4+deb12u3, <=24.11.5-4

24.11.5-4+deb13u126.05.5-1

Event History

Nov 3, 2026

CVE Published

via MITRE·03:33 PM

Data Sourced

via MITRE·03:33 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·04:17 PM

DescriptionSeverityWeakness

Data Sourced

via OSV·04:17 PM

DescriptionSeverityAffected Software

Parent advisories

This vulnerability appears in the following advisories.

DSA-6491

Frequently Asked Questions

Who is exposed to this issue?

Compute nodes running the affected Slurm workload manager software are exposed when slurmstepd performs OCI container cleanup. The issue is in cleanup handling for container spool directories and symlink resolution.

What does an attacker need to exploit it?

The vector is local and requires low privileges, according to the CVSS data. Exploitation has high attack complexity and does not require user interaction.

What is the potential impact?

An attacker could cause slurmstepd to remove files outside the attacker’s control on the compute node. The supplied CVSS vector identifies integrity impact, with no listed confidentiality or availability impact.

CVE-2026-65109: Medium severity debian/slurm-wlm vulnerability

Other sources

Affected Software

Event History

Parent advisories

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to exploit it?

What is the potential impact?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to exploit it?

What is the potential impact?