Skip to content
CVE PROGRAM SOURCE RECORD8.5 High

CVE-2025-40763

A vulnerability has been identified in Altair Grid Engine (All versions < V2026.0.0). Affected products do not properly validate environment variables when loading shared libraries

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
siemens

Description

A vulnerability has been identified in Altair Grid Engine (All versions < V2026.0.0). Affected products do not properly validate environment variables when loading shared libraries, allowing path hijacking through malicious library substitution. This could allow a local attacker to execute arbitrary code with superuser privileges by manipulating the environment variable and placing a malicious library in the controlled path.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Siemens Altair Grid Engine

Default version status: unknown

  • 0 to < V2026.0.0affected

References