Gpustack vulnerabilities
We track 4 vulnerabilities in Gpustack products. 4 are rated high or critical, and 1 has been exploited in real attacks. The most recent was published on November 4, 2026.
Latest Gpustack vulnerabilities
- 8.8 High severity
gpustack: Authorization Bypass Through User-Controlled Key
GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. From 2.2.0 until 2.2.2, cluster_apiserver_proxy forwarded an authenticated non-administrator's requests to a selected Kubernetes cluster without a resource-level
- 9.8 Critical severity
GPUStack Improper Authentication Exploited
GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0, get_current_user in gpustack/api/auth.py treated a loopback request source as the built-in administrator when force_auth_localhost was false, whi
- 9.1 Critical severity
gpustack: Authentication Bypass by Capture-replay
GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. From 0.7.1 until 2.2.2, the /auth/saml/callback endpoint decoded SAML XML, used its NameID and attributes to resolve or provision a user, and minted a gpustack_s
- 8.2 High severity
gpustack: Missing Authentication for Critical Functionality
GPUStack through 2.2.1, fixed in commit 4e20551, contains an unauthenticated information disclosure vulnerability that allows unauthenticated attackers to access sensitive inference logs and modify worker configuration by exploiting unprotected /serveLogs and