CVE-2026-103002

GPUStack users could operate a cluster through a worker service account

GPUStack · GPUStack Kubernetes API proxy

First documented disclosure · Review checkpoint

Summary

An authenticated non-administrator could reach Kubernetes resources outside the user’s authorized scope.

Severity and exploitation evidence

High · 8.8/10 · CVSS 3.1. Severity source.

Exploitation not established: The maintainer confirms the authorization defect. The reviewed advisory does not describe attacks against an actual cluster.

Exploitation evidence source

Technical severity is not a measure of observed attacks or of risk to your deployment. Attempts, demonstrations, and successful compromise retain the qualifications in the source.

How the weakness works

The API proxy forwarded requests using a worker’s Kubernetes service account without enforcing the caller’s authorization for the selected cluster resource and operation.

Conditions required

A signed-in user can reach the proxy for a Kubernetes-provider cluster with an available worker. Effective access depends on that worker’s service account.

Potential impact

The caller could read secrets, alter workloads or delete resources that the worker identity could access. Creating a workload could lead to code execution in the cluster.

Affected versions and configurations

2.2.0 and 2.2.1.

Fix and mitigation status

2.2.2. July changes enforce cluster visibility and restrict resource access for users with a cluster-usage grant.

Practical next steps

Upgrade and audit Kubernetes API operations made by GPUStack workers. Restrict unpatched deployments to trusted administrators and narrow the workers’ Kubernetes permissions.

Operating lesson

Authorize each resource and verb using the caller’s identity before forwarding a request with a stronger service account.

Evidence and limits

The public July 20 patch addressed cluster scoping. The July 24 patch refined operations for usage grants. The release predates the October advisory and November 4 CVE record.

Sources