Slurm wlm: [Fix various issues in unsafe operation/queries to the slurmdbd] (CVE-2026-65139)
Description
CVE-2026-65139 addresses multiple issues related to unsafe operations and queries in the Slurm workload manager's slurmdbd component. These issues could potentially lead to security concerns in how the database daemon processes certain operations. The vulnerability affects specific versions of slurm-wlm as listed. The severity is assessed as medium based on the available information.
Affected software
pkg:deb/ubuntu/slurm-wlm?arch=source&distro=esm-apps/jammypkg:deb/ubuntu/slurm-wlm?arch=source&distro=esm-apps/noblepkg:deb/ubuntu/slurm-wlm?arch=source&distro=stonkingpkg:deb/ubuntu/slurm-wlm?arch=source&distro=resoluteRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability involves various unsafe operations and queries to the slurmdbd, the Slurm workload manager's database daemon. The issues fixed by this CVE pertain to the handling of operations that could be unsafe, potentially leading to security risks. The exact nature of the unsafe operations or the impact is not detailed in the provided data. Multiple specific versions of slurm-wlm are affected, spanning several releases.
Potential Impact
The impact involves potential security risks arising from unsafe operations or queries to the slurmdbd component. However, no detailed exploitation scenarios or specific impacts such as privilege escalation or data leakage are described in the provided information. There are no known exploits in the wild at this time.
Mitigation Recommendations
The input does not provide explicit patch or remediation information. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Users should monitor official vendor channels for updates and apply fixes once available.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- UBUNTU-CVE-2026-65139
- Osv Schema Version
- 1.7.0
- Ecosystems
- ["Ubuntu:Pro:22.04:LTS","Ubuntu:Pro:24.04:LTS","Ubuntu:26.10","Ubuntu:26.04:LTS"]
Threat ID: 6ad3f5b52cdf04f656662845
Added to database: 10/17/2026, 22:24:53 UTC
Last enriched: 10/18/2026, 00:12:26 UTC
Last updated: 10/18/2026, 00:12:26 UTC
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.