Skip to content
Threat Feed
Subscribe

Product

Gpustack (< 2.2.2)

1 brief RSS
high advisory

GPUStack: Missing authorization in cluster API proxy (CVE-2026-103002)

An authenticated user in GPUStack versions 2.2.0 to 2.2.1 can perform unauthorized actions on managed Kubernetes clusters by exploiting a missing authorization check in the Kubernetes API proxy handler.

gpustack vulnerability authentication-bypass kubernetes cloud-native
1t 1c