Skip to content
Threat Feed
Subscribe

Product

GPUStack (>= 0.7.1, < 2.2.2)

1 brief RSS
critical advisory

GPUStack: SAML callback authentication bypass (CVE-2026-102894)

GPUStack versions 0.7.1 through 2.2.1 are vulnerable to an authentication bypass in the /auth/saml/callback endpoint, allowing unauthenticated attackers to assume arbitrary identities, including administrator accounts, by submitting forged SAML assertions.

GPUStack
1r 1t 1c