CVE-2026-103002 is a high-severity vulnerability in GPUStack, an open-source GPU cluster manager. An authenticated non-administrator could exploit this vulnerability to read sensitive resources, create or modify workloads, or delete resources in a targeted Kubernetes cluster. The issue was fixed in version 2.2.2. This vulnerability allows an attacker to access sensitive resources, create or modify workloa [truncated]
CVE-2026-102894 is a critical vulnerability in GPUStack, an open-source GPU cluster manager for AI model serving and GPU instance provisioning. The vulnerability affects versions from 0.7.1 to 2.2.2 and allows for unauthorized user provisioning and authentication bypass due to improper SAML response verification. This issue enables any network client to submit an identity for an existing user, including a [truncated]
