CVE-2026-103002

GPUStack, an open-source GPU cluster manager, is vulnerable to a missing authorization flaw in versions 2.2.0 through 2.2.2 . The cluster_apiserver_proxy component fails to perform resource-level authorization checks when forwarding requests from authenticated non-administrator users to a Kuberne...