A security flaw in the Slurm sbcast tool (CVE-2026-65107) lets shared library files bypass security checks and can crash nodes in your cluster.

What should I do?

Google updated the OS images that Cluster Toolkit supports with the necessary patches for CVE-2026-65107. If a node hasn't been recreated since September 7, 2026, then the node is vulnerable. To update the node with the latest OS image, do one of the following:

• Power down static nodes. Slurm recreates the node with the patched OS image when you submit new jobs.
• Reconfigure a running cluster. In the deployment blueprint for your cluster, update the image family and redeploy the cluster.

What vulnerabilities are being addressed?

Slurm CVE-2026-65107