44 matches found
GPUStack: Missing authorization on several cluster and resource endpoints allows cross-user access and cluster takeover
Impact An authenticated non-administrative user could access a Kubernetes cluster they are not authorized to access through GPUStack's Kubernetes API proxy. The clusterapiserverproxy handler did not perform a resource-level authorization check before forwarding requests to the selected cluster...
8.8CVSS6.2AI score0.0036EPSS
SaveExploits0References8Affected Software1
20