Skip to content
OpenAdvisories

Package · PyPI

gpustack

3 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.8

    GPUStack: Missing authorization on several cluster and resource endpoints allows cross-user access and cluster takeover

    GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. From 2.2.0 until 2.2.2, cluster_apiserver_proxy forwarded an authenticated non-administrator's requests to a selected Kubernetes cluster without a resource-leve…