GPUStack: SAML callback trusts an unverified SAMLResponse, allowing authentication bypass and account takeover

Impact The callback Base64-decodes the posted XML, reads NameID and attributes, resolves or provisions the user, and mints a gpustacksession JWT — but never calls OneLoginSaml2Auth.processresponse, the step that verifies the signature, issuer, audience, destination, and time conditions. No...

EUVD-2026-117125

GPUStack: SAML callback trusts an unverified SAMLResponse, allowing authentication bypass and account takeover...

GHSA-62M9-F875-RQW6 GPUStack: SAML callback trusts an unverified SAMLResponse, allowing authentication bypass and account takeover

Impact The callback Base64-decodes the posted XML, reads NameID and attributes, resolves or provisions the user, and mints a gpustacksession JWT — but never calls OneLoginSaml2Auth.processresponse, the step that verifies the signature, issuer, audience, destination, and time conditions. No...

CVE-2026-102894 GPUStack: SAML callback trusts an unverified SAMLResponse, allowing authentication bypass and account takeover

GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. From 0.7.1 until 2.2.2, the /auth/saml/callback endpoint decoded SAML XML, used its NameID and attributes to resolve or provision a user, and minted a gpustacksession JWT without calling...

CVE-2026-102894 GPUStack: SAML callback trusts an unverified SAMLResponse, allowing authentication bypass and account takeover

GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. From 0.7.1 until 2.2.2, the /auth/saml/callback endpoint decoded SAML XML, used its NameID and attributes to resolve or provision a user, and minted a gpustacksession JWT without calling...

CVE-2026-102894

GPUStack, an open-source GPU cluster manager, is vulnerable to an authentication bypass and account takeover in versions 0.7.1 through 2.2.2. The /auth/saml/callback endpoint fails to call OneLogin_Saml2_Auth.process_response, resulting in the processing of unverified SAML XML. Attackers can subm...

CVE-2026-102894

GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. From 0.7.1 until 2.2.2, the /auth/saml/callback endpoint decoded SAML XML, used its NameID and attributes to resolve or provision a user, and minted a gpustacksession JWT without calling...

PT-2026-137173

Name of the Vulnerable Software and Affected Versions GPUStack versions 0.7.1 through 2.2.1 Description The '/auth/saml/callback' endpoint fails to verify the signature, issuer, audience, destination, or time conditions of SAML XML by not calling the OneLogin Saml2 Auth.process response function...

GPUStack authorization issue vulnerability

A security vulnerability exists in GPUStack versions 0.7.1 through 2.2.2. This vulnerability arises because the /auth/saml/callback endpoint fails to validate the signature, issuer, audience, destination, or timestamp conditions of a SAML response before issuing a gpustacksession JWT. Additionall...

CVE-2026-102894: gpustack: GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning

GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. From 0.7.1 until 2.2.2, the /auth/saml/callback endpoint decoded SAML XML, used its NameID and attributes to resolve or provision a user, and minted a gpustacksession JWT without calling...

CVE-2025-61782

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to version 6.8.3, an open redirect vulnerability exists in the OpenCTI platform's SAML authentication endpoint /auth/saml/callback. By manipulating the RelayState parameter, an attacker can...

CVE-2025-0182

A vulnerability in danswer-ai/danswer version 0.9.0 allows for denial of service through memory exhaustion. The issue arises from the use of a vulnerable version of the starlette package =0.49 via fastapi, which was patched in fastapi version 0.115.3. The vulnerability can be exploited by sending...

PT-2025-12299

Name of the Vulnerable Software and Affected Versions danswer-ai/danswer version 0.9.0 Description The issue arises from the use of a vulnerable version of the starlette package =0.49 via fastapi, which was patched in fastapi version 0.115.3. This can be exploited by sending multiple requests to...

CVE-2025-0182: Allocation of Resources Without Limits or Throttling

A vulnerability in danswer-ai/danswer version 0.9.0 allows for denial of service through memory exhaustion. The issue arises from the use of a vulnerable version of the starlette package =0.49 via fastapi, which was patched in fastapi version 0.115.3. The vulnerability can be exploited by sending...