CVE-2026-65109
Medium · 4.7CVSS
4.7
EPSS
0.1%
Published
Nov 3, 2026
CISA due date
—
The record
NVIDIA Slurm is subject to a symlink resolution issue in the container cleanup code that could allow an attacker to remove files outside of their control on the compute node.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-121520 In BuildKit versions prior to v0.34.1, a malicious client with access to the BuildKit… CWE-61
- CVE-2026-119336 Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing… CWE-61
- CVE-2026-118688 wasmtime-wasi in Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3… CWE-61
- CVE-2026-115908 zip is a zip library for Rust that supports reading and writing simple ZIP files. CWE-61
- CVE-2026-115424 A flaw was found in the OpenShift client oc. CWE-61
- CVE-2026-115392 Wasmtime before 24.0.13, 25.0.0 before 36.0.14, 37.0.0 before 46.0.3, and 47.0.0 before… CWE-61
- CVE-2026-106566 ImageMagick is free and open-source software used for editing and manipulating digital… CWE-61
- CVE-2026-105712 gpgtar in GnuPG before 2.5.19 can allow file overwrite via crafted data in an archive. CWE-61