Ggpustack

Products

Exploited and recent CVEs

• CVE-2026-103002 High 8.8 GPUStack: Missing authorization on several cluster and resource endpoints allows cross-user access and cluster takeover 0.4%
• CVE-2026-102894 Critical 9.1 GPUStack: SAML callback trusts an unverified SAMLResponse, allowing authentication bypass and account takeover 0.3%
• CVE-2026-102895 Critical 9.8 GPUStack: Authentication bypass via trusted loopback source (reverse-proxy TCP peer or X-GPUStack-Real-IP header) grants unauthenticated admin 0.3%
• CVE-2026-58658 High 8.2 GPUStack Unauthenticated Information Disclosure via Worker Endpoints 0.5%