---
id: CVE-2026-44875
title: >-
  In HPE Cray Programming Environment versions 25.03 and 25.09, prior to 26.03,
  the method that CPE is deployed on HPCM potentially allows elevated access by
  a local unprivileged user.
summary: >-
  In HPE Cray Programming Environment versions 25.03 and 25.09, prior to 26.03,
  the method that CPE is deployed on HPCM potentially allows elevated access by
  a local unprivileged user.
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cvssSource: adp
cwe:
  - CWE-276
vendor: Hewlett Packard Enterprise (HPE)
product: HPE Cray Programming Environment
affected:
  - hpe_cray_programming_environment 25.03
  - hpe_cray_programming_environment 25.09
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-11-05T20:44:37.317291Z'
published: '2026-11-05'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T20:44:41.150Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-44875'
references:
  - url: >-
      https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbcr05046en_us&docLocale=en_US
tags:
  - cve.org
ingestedAt: '2026-11-05T22:38:31.877Z'
---

## Overview

In HPE Cray Programming Environment versions 25.03 and 25.09, prior to 26.03, the method that CPE is deployed on HPCM potentially allows elevated access by a local unprivileged user.

## Affected

- `hpe_cray_programming_environment 25.03`
- `hpe_cray_programming_environment 25.09`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.