CVE-2026-103002 - GPUStack: Missing authorization on several cluster and resource endpoints allows cross-user access and cluster takeover
CVE ID :CVE-2026-103002 Published : Nov. 4, 2026, 10:17 p.m. | 48 minutes ago Description :GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. From 2.2.0 until 2.2.2, cluster_apiserver_proxy forwarded an authenticated non-administrator's requests...