UBUNTU-CVE-2026-65140: Medium severity ubuntu/slurm-wlm vulnerability

Published Nov 3, 2026

Updated

NVIDIA Slurm contains some inconsistent authorization checks against the Operator permission level in the SlurmDBD that can be chained together in a way that would permit an Operator to make themselves an Administrator.

Affected Software

4 affected components

ubuntu/slurm-wlm*

Event History

Nov 3, 2026

CVE Published

via OSV·04:17 PM

Data Sourced

via OSV·04:17 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

Who is exposed to this issue?

Deployments using SlurmDBD where users can hold the Operator permission level are exposed. The affected Ubuntu software package is slurm-wlm.

What access does an attacker need?

An attacker must already have SlurmDBD Operator-level permissions and be able to chain inconsistent authorization checks. The CVSS vector indicates local access, high attack complexity, and high privileges required; no user interaction is required.

UBUNTU-CVE-2026-65140: Medium severity ubuntu/slurm-wlm vulnerability

Affected Software

Event History

Frequently Asked Questions

Who is exposed to this issue?

What access does an attacker need?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to this issue?

What access does an attacker need?