CVE-2026-103002

Received Received - Intake

Privilege Escalation in GPUStack via Unauthorized Kubernetes API Access

Publication date: 2026-11-04

Last updated on: 2026-11-04

Assigner: GitHub, Inc.

Description

GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. From 2.2.0 until 2.2.2, cluster_apiserver_proxy forwarded an authenticated non-administrator's requests to a selected Kubernetes cluster without a resource-level authorization check. The proxy used a reachable worker's Kubernetes ServiceAccount credentials, so the caller could read sensitive resources, create or modify workloads, or delete resources according to that ServiceAccount's permissions. Exploitation required a Kubernetes-provider cluster with a reachable worker, and attacker-controlled workloads could result in code execution in the target cluster. This issue is fixed in version 2.2.2.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-11-04

Last Modified

2026-11-04

Generated

2026-11-05

AI Q&A

2026-11-05

EPSS Evaluated

N/A

NVD

CVE-2026-103002

Affected Vendors & Products

Vendor	Product	Version / Range
gpustack	gpustack	>= 2.2.0, < 2.2.2

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-862	The product does not perform an authorization check when an actor attempts to access a resource or perform an action.
CWE-639	The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

Attack-Flow Graph

Executive Summary

GPUStack versions 2.2.0 to 2.2.2 had a flaw in cluster_apiserver_proxy where authenticated non-admin users could send requests to a Kubernetes cluster without proper resource-level authorization checks. The proxy forwarded these requests using a worker's Kubernetes ServiceAccount credentials, allowing attackers to read sensitive data, modify workloads, or delete resources based on those credentials.

Detection Guidance

Check GPUStack version for affected releases (2.2.0 to 2.2.2). Inspect Kubernetes cluster logs for unauthorized access attempts or unusual proxy requests. Review ServiceAccount permissions for exposed credentials.

Impact Analysis

If exploited, this vulnerability could allow unauthorized access to sensitive Kubernetes resources, enable creation or modification of workloads, or deletion of critical resources. Attackers could potentially execute arbitrary code within the target cluster if they control workloads, leading to data breaches or service disruptions.

Compliance Impact

This vulnerability could lead to unauthorized access or exposure of sensitive data, violating GDPR's data protection requirements and HIPAA's safeguards for protected health information. Non-compliance risks include legal penalties, reputational damage, and loss of trust due to potential data breaches.

Mitigation Strategies

Upgrade GPUStack to version 2.2.2 or later. Restrict Kubernetes ServiceAccount permissions. Disable proxy access to worker nodes if not required. Monitor cluster for suspicious activity.

Hi! I’m here to help you understand CVE-2026-103002. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70

EPSS Chart

Security Radar

News mentioning this vulnerability

Loading related security news...