Security bulletins

This document describes all security bulletins that are related to Cluster Toolkit. Use these bulletins to identify known vulnerabilities and apply the recommended mitigations or fixes to protect your infrastructure.

To get the latest security bulletins delivered to you, do one of the following:

• Add the URL of this page to your feed reader.
• Add the feed URL directly to your feed reader: /feeds/cluster-toolkit-security-bulletins.xml

GCP-2026-060

Published: 2026-09-07

Description

Description	Severity	Notes
A security flaw in the Slurm sbcast tool (CVE-2026-65107) lets shared library files bypass security checks and can crash nodes in your cluster. What should I do? Google updated the OS images that Cluster Toolkit supports with the necessary patches for CVE-2026-65107. If a node hasn't been recreated since September 7, 2026, then the node is vulnerable. To update the node with the latest OS image, do one of the following: Power down static nodes. Slurm recreates the node with the patched OS image when you submit new jobs. Reconfigure a running cluster. In the deployment blueprint for your cluster, update the image family and redeploy the cluster. What vulnerabilities are being addressed? Slurm CVE-2026-65107	High	CVE-2026-65107