{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/gpustack--0.7.1--2.2.2/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:gpustack:gpustack:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":9.1,"id":"CVE-2026-102894"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["GPUStack (\u003e= 0.7.1, \u003c 2.2.2)"],"_cs_severities":["critical"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["GPUStack"],"content_html":"\u003cp\u003eGPUStack versions 0.7.1 through 2.2.1 contain a critical authentication bypass vulnerability due to improper handling of SAML assertions. The application fails to verify the SAML response signature, issuer, audience, destination, or time conditions using the expected \u003ccode\u003eOneLogin_Saml2_Auth.process_response()\u003c/code\u003e function. This vulnerability is active regardless of whether SAML SSO is configured, allowing an attacker to reach the \u003ccode\u003e/auth/saml/callback\u003c/code\u003e endpoint and authenticate as any user by posting a forged XML payload. Successful exploitation results in account takeover, including administrative access, and allows for infinite replay of captured assertions.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation grants an attacker full access to the target GPUStack deployment and any managed infrastructure. The vulnerability allows for identity spoofing of existing administrative users. Because the affected endpoint is enabled by default, all installations prior to 2.2.2 are at risk.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade GPUStack to version 2.2.2 or later immediately to patch CVE-2026-102894.\u003c/li\u003e\n\u003cli\u003eUntil patching, block network access to the \u003ccode\u003e/auth/saml/callback\u003c/code\u003e URI at the reverse proxy or ingress level.\u003c/li\u003e\n\u003cli\u003eAudit existing user sessions and logs for anomalous successful authentication events originating from unexpected or untrusted network sources.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-10T16:34:10Z","date_published":"2026-11-10T16:34:10Z","id":"https://feed.craftedsignal.io/briefs/2026-11-gpustack-saml-bypass/","summary":"GPUStack versions 0.7.1 through 2.2.1 are vulnerable to an authentication bypass in the /auth/saml/callback endpoint, allowing unauthenticated attackers to assume arbitrary identities, including administrator accounts, by submitting forged SAML assertions.","title":"GPUStack: SAML callback authentication bypass (CVE-2026-102894)","url":"https://feed.craftedsignal.io/briefs/2026-11-gpustack-saml-bypass/"}],"language":"en","title":"CraftedSignal Threat Feed - GPUStack (\u003e= 0.7.1, \u003c 2.2.2)","version":"https://jsonfeed.org/version/1.1"}