Login Request a demo
HT
Product
HTCondor
by wisc · last CVE Nov 30, 2025
13
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Vulnerabilities13In the news0Timeline
Severity mix
Critical 2High 9Medium 2Low 0
Severity
All severities13Critical2High9Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add HTCondor to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-25311
9.9
3%
Jan 27
condor_credd in HTCondor before 8.9.11 allows Directory Traversal outside the SEC_CREDENTIAL_DIRECTORY_OAUTH directory, as demonstrated by creating a file under /etc that will…
Affected: 8.9.7 before 8.9.11
CVE-2019-18823
9.8
3%
Apr 27
HTCondor up to and including stable series 8.8.6 and development series 8.9.4 has Incorrect Access Control
Affected: 8.8.0 through 8.8.6; 8.9.0 through 8.9.4
CVE-2022-26110
8.8
1%
Apr 6
An issue was discovered in HTCondor 8.8.x before 8.8.16, 9.0.x before 9.0.10, and 9.1.x before 9.6.0
Affected: 8.8.0 before 8.8.16; 9.0.0 before 9.0.10; 9.1.0 before 9.6.0
CVE-2021-45102
8.8
1%
Dec 16
An issue was discovered in HTCondor 9.0.x before 9.0.4 and 9.1.x before 9.1.2
Affected: 9.0.0; 9.0.1; 9.0.2; 9.1.0
CVE-2021-25312
8.8
1%
Jan 27
HTCondor before 8.9.11 allows a user to submit a job as another user on the system, because of a flaw in the IDTOKENS authentication method
Affected: 8.9.2 before 8.9.11
CVE-2014-8126
8.8
3%
Jan 31
The scheduler in HTCondor before 8.2.6 allows remote authenticated users to execute arbitrary code
Affected: before 8.2.6
CVE-2012-3490
8.8
4%
Jan 9
The (1) my_popenv_impl and (2) my_spawnv functions in src/condor_utils/my_popen.cpp and the (3) systemCommand function in condor_vm-gahp/vmgahp_common.cpp in Condor 7.6.x before…
Affected: 7.6.0 before 7.6.10; 7.8.0 before 7.8.4
CVE-2025-30093
8.1
0%
Mar 27
HTCondor 23.0.x before 23.0.22, 23.10.x before 23.10.22, 24.0.x before 24.0.6, and 24.6.x before 24.6.1 allows authenticated attackers to bypass authorization restrictions
Affected: 23.0.0 before 23.0.22; 23.10.1 before 23.10.22; 24.0.1 before 24.0.6
CVE-2021-45103
8.1
1%
Apr 6
An issue was discovered in HTCondor 9.0.x before 9.0.10 and 9.1.x before 9.5.1
Affected: 8.9.4 before 9.0.10; 9.1.0 before 9.6.0
CVE-2021-45101
8.1
1%
Dec 16
An issue was discovered in HTCondor before 8.8.15, 9.0.x before 9.0.4, and 9.1.x before 9.1.2
Affected: through 8.8.13; 9.0.0 through 9.0.2; 9.1.0
CVE-2021-45104
7.4
1%
Apr 6
An issue was discovered in HTCondor 9.0.x before 9.0.10 and 9.1.x before 9.5.1
Affected: 8.9.3 before 9.0.10; 9.1.0 before 9.6.0
CVE-2017-16816
6.5
2%
Jul 5
The condor_schedd component in HTCondor before 8.6.8 and 8.7.x before 8.7.5 allows remote authenticated users to cause a denial of service (daemon crash) by leveraging use of GSI…
Affected: before 8.6.8; 8.7.0 before 8.7.5
CVE-2025-66433
4.2
0%
Nov 30
HTCondor Access Point before 25.3.1 allows an authenticated user to impersonate other users on the local machine by submitting a batch job
Affected: 24.7.3 before 24.12.14; 25.0.0 before 25.0.3; 25.1.0 before 25.3.1
Showing 13