CVE-2024-22441: HPE Cray Parallel Application Launch Service

Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days.

HPE Cray Parallel Application Launch Service (PALS) is subject to an authentication bypass.

Affected products

  • HPE Cray Parallel Application Launch Service: from 1.0.0, before 1.2.14 (fixed in 1.2.14); from 1.3.0, before 1.3.3 (fixed in 1.3.3)

Published 2024-06-13. Last modified 2026-06-17.