LLM frameworks · GPUStack
GPUStack
Open-source GPU cluster manager for serving AI models and provisioning GPU instances.
3Advisories
2critical
1high
0medium
2026-11-04Latest
Timeline · advisories per quarter
32026 Q4
Named in sources
Reported for GPUStack
01. CVE-2026-102895: GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0, get_current_user in gpustack/api/auth.py treaGPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0, get_current_user in gpustack/api/auth.py treated a loopback request source as the built-in administrator when force_auth_localhost was false, which was the default. GPUStack 2026-11-04 02. CVE-2026-102894: GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. From 0.7.1 until 2.2.2, the /auth/saml/callback endpoint decoGPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. GPUStack 2026-11-04 03. CVE-2026-103002: GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. From 2.2.0 until 2.2.2, cluster_apiserver_proxy forwarded anGPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. From 2.2.0 until 2.2.2, cluster_apiserver_proxy forwarded an authenticated non-administrator's requests to a selected Kubernetes cluster without a resource-level authorization check. GPUStack 2026-11-04
GPUStack 2026-11-04 02. CVE-2026-102894: GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. From 0.7.1 until 2.2.2, the /auth/saml/callback endpoint decoGPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. GPUStack 2026-11-04 03. CVE-2026-103002: GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. From 2.2.0 until 2.2.2, cluster_apiserver_proxy forwarded anGPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. From 2.2.0 until 2.2.2, cluster_apiserver_proxy forwarded an authenticated non-administrator's requests to a selected Kubernetes cluster without a resource-level authorization check. GPUStack 2026-11-04