Disclosed weakness · no CVE recorded

GPUStack workers accepted inference credentials for management access

GPUStack · GPUStack

First documented disclosure · Review checkpoint

Summary

A key issued only to run inference could reach worker-management information and functions.

Severity and exploitation evidence

High · 7.6/10 · CVSS 3.1. Severity source.

Exploitation not established: The original source establishes the weakness but does not report malicious exploitation.

Exploitation evidence source

Technical severity is not a measure of observed attacks or of risk to your deployment. Attempts, demonstrations, and successful compromise retain the qualifications in the source.

How the weakness works

A worker accepted an inference authorization decision on management operations.

Conditions required

A caller has a valid inference-only key for a served model and can reach the affected worker interface.

Potential impact

Operational information and worker-management functions were exposed beyond the key’s intended use, subject to further checks.

Affected versions and configurations

<=2.2.3

Fix and mitigation status

2.3.0 fixes this issue.

Practical next steps

Upgrade to 2.3.0 or a later release containing this fix. Update workers, including embedded workers, and keep management access separate from inference traffic.

Operating lesson

Use distinct authentication audiences for inference and administration.

Evidence and limits

GPUStack shipped 2.3.0 on October 23. GitHub records an edit to the release notes on October 26, when GPUStack published the dated advisory. No CVE was listed in the advisory at review.

Sources