Description
A vulnerability has been identified in Altair Grid Engine (All versions < V2026.0.0). Affected products do not properly validate environment variables when loading shared libraries, allowing path hijacking through malicious library substitution.
This could allow a local attacker to execute arbitrary code with superuser privileges by manipulating the environment variable and placing a malicious library in the controlled path.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | Altair Grid Engine | < V2026.0.0 | V2026.0.0 |
Advisories 3
- NCSC-2025-0357 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Nov 11, 2025
- ICSA-25-317-16 Siemens Altair Grid Engine CISA ICS & IT advisories · Nov 11, 2025
- SSA-514895 SSA-514895: Multiple Vulnerabilities in Altair Grid Engine V2025.1.0 Siemens ProductCERT · Nov 11, 2025