In SchedMD Slurm before 24.11.5, 24.05.8, and 23.11.11, the accounting system can allow a Coordinator to promote a user to Administrator.
CVSS Details
- CVSS 3.1 Base Score: 4.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade slurm-wlm | Jul 9, 2025 | Jul 9, 2025 |
| Suse | — | Upgrade slurm_23_02Upgrade slurm_23_02-pluginsUpgrade slurm_22_05-pluginsUpgrade slurm_23_02-docUpgrade slurm_22_05-hdf5Upgrade slurm-config-manUpgrade slurm_23_02-seffUpgrade slurm_23_02-torqueUpgrade slurm_22_05-auth-noneUpgrade slurm-luaUpgrade slurm_24_11-pluginsUpgrade libnss_slurm2Upgrade libnss_slurm2_20_11Upgrade perl-slurm_23_02Upgrade libpmi0_20_11Upgrade slurm_22_05-sjstatUpgrade libnss_slurm2_24_11Upgrade slurm_23_02-nodeUpgrade slurm_22_05-sviewUpgrade slurm-nodeUpgrade slurm-plugin-ext-sensors-rrdUpgrade slurm_20_11-docUpgrade slurm_22_05-seffUpgrade slurm_20_11-webdocUpgrade slurm_22_05-testsuiteUpgrade slurm_24_11-luaUpgrade slurm_23_02-slurmdbdUpgrade slurm_23_02-pam_slurmUpgrade slurm_24_11-crayUpgrade libnss_slurm2_23_02Upgrade slurm-mungeUpgrade slurm_20_11-torqueUpgrade slurm-docUpgrade slurm_22_05-nodeUpgrade slurm_24_11-pam_slurmUpgrade libpmi0_23_02Upgrade slurm_22_05-torqueUpgrade slurm_23_02-plugin-ext-sensors-rrdUpgrade slurm_24_11-sjstatUpgrade perl-slurm_24_11Upgrade slurm_24_11-restUpgrade slurm-slurmdbdUpgrade libnss_slurm2_22_05Upgrade slurm_22_05-openlavaUpgrade slurm_24_11-torqueUpgrade slurm-seffUpgrade slurm_20_11-develUpgrade slurm_20_11-nodeUpgrade slurm_20_11-configUpgrade slurm_22_05-restUpgrade slurm_23_02-luaUpgrade slurm_23_02-sqlUpgrade slurm_22_05-config-manUpgrade slurm_20_11-slurmdbdUpgrade slurm_20_11-sqlUpgrade slurm_23_02-crayUpgrade slurm-sjstatUpgrade slurm_23_02-hdf5Upgrade slurm_23_02-mungeUpgrade slurm_22_05-webdocUpgrade slurm-auth-noneUpgrade slurm_24_11-sviewUpgrade slurm_24_11-mungeUpgrade slurmUpgrade slurm-configUpgrade slurm_24_11-develUpgrade slurm-crayUpgrade slurm_24_11-auth-noneUpgrade slurm_24_11-sqlUpgrade slurm_23_02-configUpgrade slurm_22_05-slurmdbdUpgrade slurm_20_11-pluginsUpgrade slurm_20_11-config-manUpgrade slurm_23_02-auth-noneUpgrade slurm_20_11-sviewUpgrade slurm_20_11Upgrade slurm-develUpgrade perl-slurm_22_05Upgrade libslurm39Upgrade slurm_22_05Upgrade slurm_20_11-auth-noneUpgrade slurm_23_02-testsuiteUpgrade libpmi0_24_11Upgrade slurm_24_11-nodeUpgrade libslurm36Upgrade slurm_22_05-sqlUpgrade slurm_22_05-mungeUpgrade slurm_22_05-crayUpgrade slurm_20_11-mungeUpgrade slurm-testsuiteUpgrade slurm_24_11-slurmdbdUpgrade slurm_24_11-seffUpgrade slurm_24_11-openlavaUpgrade slurm_23_02-webdocUpgrade slurm_22_05-pam_slurmUpgrade slurm_23_02-sviewUpgrade slurm-webdocUpgrade slurm-restUpgrade slurm_20_11-pam_slurmUpgrade slurm-sviewUpgrade slurm-openlavaUpgrade libslurm38Upgrade libpmi0Upgrade slurm_24_11-webdocUpgrade slurm_24_11-hdf5Upgrade slurm_23_02-develUpgrade slurm-pam_slurmUpgrade slurm-hdf5Upgrade slurm_24_11-config-manUpgrade slurm_22_05-luaUpgrade slurm_20_11-luaUpgrade slurm-torqueUpgrade libslurm42Upgrade slurm_23_02-openlavaUpgrade slurm_22_05-docUpgrade slurm_23_02-config-manUpgrade slurm_23_02-sjstatUpgrade slurm_23_02-restUpgrade slurm_22_05-develUpgrade slurm_22_05-configUpgrade slurm-sqlUpgrade slurm-pluginsUpgrade perl-slurmUpgrade slurm_24_11-testsuiteUpgrade slurm_24_11Upgrade libpmi0_22_05Upgrade perl-slurm_20_11Upgrade slurm_24_11-docUpgrade slurm_24_11-config | Dec 5, 2025 | May 29, 2025 |
| Ubuntu | — | Upgrade libpam-slurm (Ubuntu Pro)Upgrade libslurm-dev (Ubuntu Pro)Upgrade slurmd (Ubuntu Pro)Upgrade libpam-slurm-dev (Ubuntu Pro)Upgrade slurm-wlm (Ubuntu Pro)Upgrade slurmctld (Ubuntu Pro) | May 7, 2026 | Jan 16, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub