CVE-2026-103002

Name of the Vulnerable Software and Affected Versions GPUStack versions 2.2.0 through 2.2.1

Description The cluster apiserver proxy forwards authenticated requests from non-administrator users to a selected Kubernetes cluster without performing resource-level authorization checks. The proxy utilizes the Kubernetes ServiceAccount credentials of a reachable worker, allowing an attacker to read sensitive resources, create or modify workloads, or delete resources based on the permissions assigned to that ServiceAccount. In environments with a Kubernetes-provider cluster and a reachable worker, this could lead to code execution within the target cluster via attacker-controlled workloads.

Recommendations Update to version 2.2.2.