7.8
High
CVE-2025-40763 A vulnerability has been identified in Altair Grid Engine (All versions < V2026.0.0)
Description
A vulnerability has been identified in Altair Grid Engine (All versions < V2026.0.0). Affected products do not properly validate environment variables when loading shared libraries, allowing path hijacking through malicious library substitution. This could allow a local attacker to execute arbitrary code with superuser privileges by manipulating the environment variable and placing a malicious library in the controlled path.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Altair Grid Engine 2026.0 | earliest → < 2026.0.0 | 2026.0.0 |