GCP-2026-060

In plain language

What this advisory means

A security issue was found in Google's Slurm sbcast tool that could allow shared library files to bypass security checks and potentially cause cluster nodes to crash. This affects the stability and security of computing clusters using this tool. Users should review the linked Cluster Toolkit and Cluster Director security bulletins for guidance.

Technical explanation

How the issue affects the environment

Google Cloud identified a vulnerability in the Slurm sbcast tool (tracked as CVE-2026-65107) used in cluster management. The flaw allows shared library files to bypass security validation, leading to potential node crashes within the cluster. This behavior compromises node stability and may pose security risks by circumventing expected checks on shared library files. Detailed mitigations and instructions are available in the Cluster Toolkit and Cluster Director security bulletins provided by Google Cloud.

Operational impact

Why teams should care

Clusters running workloads with the vulnerable Slurm sbcast tool risk unexpected node crashes, which can lead to service disruption, reduced availability, and potential operational instability. This may also expose systems to security risks through unchecked shared library manipulations, impacting trust in cluster operations and possibly causing downtime for critical applications.

Affected and fixed releases

Temporary risk reduction

No specific workaround is described in the available bulletins. Users should refer to the official cluster-related security bulletins for potential temporary mitigations.

Evidence and validation checklist

• Official Google Cloud Security Bulletins entry for GCP-2026-060.
• Reference to CVE-2026-65107 describing vulnerability in Slurm sbcast.
• Update adding links to Cluster Toolkit and Cluster Director security bulletins for remediation guidance.
• Published dates: initial on 2026-09-04, update on 2026-09-08.