Lucene search
+L

44 matches found

Github Security Blog
Github Security Blog
•added 2026/11/10 3:57 p.m.•1 views

GPUStack: Missing authorization on several cluster and resource endpoints allows cross-user access and cluster takeover

Impact An authenticated non-administrative user could access a Kubernetes cluster they are not authorized to access through GPUStack's Kubernetes API proxy. The clusterapiserverproxy handler did not perform a resource-level authorization check before forwarding requests to the selected cluster...

8.8CVSS0.0036EPSS
SaveExploits0References8Affected Software1
Rows per page
Query Builder