SSA-514895: Multiple Vulnerabilities in Altair Grid Engine V2025.1.0
Altair Grid Engine contain multiple vulnerabilities that could allow an attacker to escalate privileges and execute arbitrary code with superuser permissions. Siemens has released a new version for Altair Grid Engine and recommends to update to the latest version.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-40763US | — | — | ||
A vulnerability has been identified in Altair Grid Engine (All versions < V2026.0.0). Affected products do not properly validate environment variables when loading shared libraries… | ||||
| CVE-2025-40760US | — | — | ||
A vulnerability has been identified in Altair Grid Engine (All versions < V2026.0.0). Affected products do not properly handle error messages and discloses sensitive password hash… | ||||
references
External citations — patches, advisories, analysis.
remediations (4)
- MitigationAltair Grid Engine
For clusters not using the UGERest API/daemon remove the setuid-root bit from the binaries for all architectures: chmod u-s $SGE_ROOT/utilbin/<arch>/authuser.
- MitigationAltair Grid Engine
For non Windows clusters remove the setuid-root bit from the "sgepasswd" binary for all installed architectures: chmod u-s $SGE_ROOT/bin/<arch>/sgepasswd.
- FixedAltair Grid Engine
Update to V2026.0.0 or later version
https://altairone.com/Marketplace - FixedAltair Grid Engine
Update to V2026.0.0 or later version
https://altairone.com/Marketplace
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan