Disclosed weakness · no CVE recorded

GPUStack cluster views could expose registry and model credentials

GPUStack · GPUStack

First documented disclosure · Review checkpoint

Summary

Viewing a cluster could reveal credentials for its model repositories and container registries.

Severity and exploitation evidence

High · 7.7/10 · CVSS 3.1. Severity source.

Exploitation not established: The original source establishes the weakness but does not report malicious exploitation.

Exploitation evidence source

Technical severity is not a measure of observed attacks or of risk to your deployment. Attempts, demonstrations, and successful compromise retain the qualifications in the source.

How the weakness works

Cluster read operations returned stored credentials to users entitled only to view the cluster.

Conditions required

A signed-in account can view a cluster that holds repository or registry credentials.

Potential impact

Exposed credentials could grant access permitted by their upstream scopes.

Affected versions and configurations

2.2.0 and later, before 2.3.1 (maintainer narrative).

Fix and mitigation status

2.3.1 fixes this issue.

Practical next steps

Upgrade to 2.3.1 or a later release containing this fix. Rotate potentially exposed Hugging Face and container-registry credentials and review upstream activity.

Operating lesson

Test list, detail and event views for secret redaction.

Evidence and limits

The maintainer assigns the score. No CVE was listed in the original advisory at review. The affected range follows the maintainer’s narrative. Its package table gives a different range, and both identify 2.3.1 as fixed.

Sources