GHSA-3hch-x692-6qj3

Suggest an improvement
Source
https://github.com/advisories/GHSA-3hch-x692-6qj3
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/11/GHSA-3hch-x692-6qj3/GHSA-3hch-x692-6qj3.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-3hch-x692-6qj3
Aliases
Published
2026-11-10T15:57:20Z
Modified
2026-11-10T16:15:05Z
Severity
  • 8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
GPUStack: Missing authorization on several cluster and resource endpoints allows cross-user access and cluster takeover
Details

Impact

An authenticated non-administrative user could access a Kubernetes cluster they are not authorized to access through GPUStack's Kubernetes API proxy.

The cluster_apiserver_proxy handler did not perform a resource-level authorization check before forwarding requests to the selected cluster. Requests were forwarded through a worker using its Kubernetes ServiceAccount credentials.

Depending on the permissions granted to that ServiceAccount, an attacker could read sensitive Kubernetes resources, create or modify workloads, or delete resources and disrupt services. Creating attacker-controlled workloads could result in code execution in the target cluster.

Exploitation requires a Kubernetes-provider cluster with a reachable worker. The operations available to the attacker are limited by the worker's ServiceAccount permissions.

Patches

Fixed in gpustack v2.2.2.

Workarounds

Restrict access to the GPUStack instance to trusted administrator accounts until upgrading.

Database specific 
{
    "cwe_ids": [
        "CWE-639",
        "CWE-862"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2026-11-10T15:57:20Z",
    "nvd_published_at": "2026-11-04T22:17:44Z",
    "severity": "HIGH"
}
References

Affected packages

PyPI / gpustack

Package

Name
gpustack
View open source insights on deps.dev
Purl
pkg:pypi/gpustack

Affected ranges

Type
ECOSYSTEM
Events
Introduced
2.2.0
Fixed
2.2.2

Affected versions

2.*
2.2.0
2.2.1rc1
2.2.1
2.2.2rc1

Database specific

source 
"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/11/GHSA-3hch-x692-6qj3/GHSA-3hch-x692-6qj3.json"