UBUNTU-CVE-2026-65139: SQL Injection

Published Nov 3, 2026

Updated

NVIDIA Slurm contains an attacker-controlled SQL injection attack in certain SlurmDBD RPCs that can lead to arbitrary code execution.

Affected Software

4 affected components

ubuntu/slurm-wlm*

Event History

Nov 3, 2026

CVE Published

via OSV·04:17 PM

Data Sourced

via OSV·04:17 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What access does an attacker need to exploit this issue?

The attack vector is local and requires low privileges. No user interaction is required.

What is the expected security impact if exploitation succeeds?

The vulnerability is rated as having high confidentiality and integrity impact. No availability impact is indicated by the supplied CVSS vector.

How difficult is exploitation expected to be?

The CVSS vector rates attack complexity as high, meaning exploitation depends on conditions beyond simply having the required local, low-privileged access.

UBUNTU-CVE-2026-65139: SQL Injection

Affected Software

Event History

Frequently Asked Questions

What access does an attacker need to exploit this issue?

What is the expected security impact if exploitation succeeds?

How difficult is exploitation expected to be?

Company

Resources

Contact

Frequently Asked Questions

What access does an attacker need to exploit this issue?

What is the expected security impact if exploitation succeeds?

How difficult is exploitation expected to be?