CVE-2025-40760

Name of the Vulnerable Software and Affected Versions Altair Grid Engine versions prior to 2026.0.0

Description The software does not properly handle error messages, leading to the disclosure of sensitive password hash information during user authentication requests. This could allow a local attacker to extract password hashes for privileged accounts, potentially enabling offline brute-force attacks. The API endpoint involved in this issue is the user authentication request process. The vulnerable information is the password hash.

Recommendations Update to version 2026.0.0 or later.