HPE Cray Programming Environment HPCM deployment flaw allows elevated access
Regular users on supercomputer dev tools can take admin rights.
Summary
The way HPE Cray Programming Environment is deployed on HPCM can let a local unprivileged user gain elevated access. Versions 25.03 and 25.09, prior to 26.03, are affected.
Affected when
- CPE deployed on HPCM
- local unprivileged user account
What to do
Affected versions are before 26.03; check that you run 26.03 or newer and read the HPE advisory.
Products and platforms
CVE IDs
Times
First published
First seen