Skip to content
OpenAdvisories

Vendor

gpustack

4 known vulnerabilities.

Products

gpustack 4
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2026-103002

    GPUStack: Missing authorization on several cluster and resource endpoints allows cross-user access and cluster takeover

    GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. From 2.2.0 until 2.2.2, cluster_apiserver_proxy forwarded an authenticated non-administrator's requests to a selected Kubernetes cluster without a resource-leve…

    gpustack gpustack gpustack PyPI
  • High 8.2
    CVE-2026-58658

    GPUStack Unauthenticated Information Disclosure via Worker Endpoints

    GPUStack through 2.2.1, fixed in commit 4e20551, contains an unauthenticated information disclosure vulnerability that allows unauthenticated attackers to access sensitive inference logs and modify worker configuration by exploiting unprotected /serveLogs and…

    gpustack gpustack