gpustack vulnerabilities and fixes
Exploited and high-severity gpustack vulnerabilities tracked by VulnFeed, with CVSS and EPSS scores, affected versions and fixes.
- 9.1CVE-2026-102894GPUStack: SAML callback trusts an unverified SAMLResponse, allowing authentication bypass and account takeoverVerify fixgpustack gpustack
1 min read - 8.8CVE-2026-103002GPUStack: Missing authorization on several cluster and resource endpoints allows cross-user access and cluster takeoverCloudVerify fixgpustack gpustack
1 min read - 9.8CVE-2026-102895GPUStack: Authentication bypass via trusted loopback source (reverse-proxy TCP peer or X-GPUStack-Real-IP header) grants unauthenticated adminVerify fixgpustack gpustack
1 min read