gpustack vulnerabilities (PyPI)
3 vulnerabilities.
gpustackPyPIGPUStack: Missing authorization on several cluster and resource endpoints allows cross-user access and cluster takeover8.8 HighgpustackPyPIGPUStack: SAML callback trusts an unverified SAMLResponse, allowing authentication bypass and account takeover9.1 CriticalgpustackPyPIGPUStack: Authentication bypass via trusted loopback source (reverse-proxy TCP peer or X-GPUStack-Real-IP header) grants unauthenticated admin9.8 Critical