gpustack has 3 CVEs on record. 3 were published in the last 90 days. The busiest recent month was November 2026 with 3. The median CVSS is 9.1 (critical), with 2 rated critical.
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 9.1
- Publish → KEV
- —
- Last 90 days
- 3 prev 0
Worst active — by depth score
CVE-2026-102895Critical· 9.8GPUStack: Authentication bypass via trusted loopback source (reverse-proxy TCP peer or X-GPUStack-Real-IP header) grants unauthenticated admin54CVE-2026-102894Critical· 9.1GPUStack: SAML callback trusts an unverified SAMLResponse, allowing authentication bypass and account takeover50CVE-2026-103002High· 8.8GPUStack: Missing authorization on several cluster and resource endpoints allows cross-user access and cluster takeover48
gpustack vulnerabilities
CVEs affecting gpustack, newest first. Open any entry for full detail, references, and exploit status.
3 CVEsRSS
CVE-2026-102895Critical· 9.8GPUStack: Authentication bypass via trusted loopback source (reverse-proxy TCP peer or X-GPUStack-Real-IP header) grants unauthenticated admin
GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0, get_current_user in gpustack/api/auth.py treated a loopback request source as the built-in administrator when force_auth_l…
CVE-2026-103002High· 8.8GPUStack: Missing authorization on several cluster and resource endpoints allows cross-user access and cluster takeover
GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. From 2.2.0 until 2.2.2, cluster_apiserver_proxy forwarded an authenticated non-administrator's requests to a selected Kubernetes cluster w…
CVE-2026-102894Critical· 9.1GPUStack: SAML callback trusts an unverified SAMLResponse, allowing authentication bypass and account takeover
GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. From 0.7.1 until 2.2.2, the /auth/saml/callback endpoint decoded SAML XML, used its NameID and attributes to resolve or provision a user, …