CriticalCVSS 9.1CVE-2026-102894GHSA-62m9-f875-rqw6gpustack (pip)Affected >= 0.7.1, < 2.2.2 · Fixed in 2.2.2Advisory
A GitHub advisory says GPUStack's SAML callback decodes a posted SAMLResponse and issues a session token without verifying it.
- Affected: gpustack (pip) >= 0.7.1, < 2.2.2
- Patched version: 2.2.2
high evidence1 sourcefirst seen Nov 10
Read more →
CriticalCVSS 9.8CVE-2026-102895GHSA-gj9m-f8ph-pmhrgpustack (pip)Affected < 2.2.0 · Fixed in 2.2.0Advisory
A GitHub advisory says GPUStack before v2.2.0 treats requests from a loopback source as the built-in administrator when force_auth_localhost is False, the default.
- Affected: gpustack (pip) < 2.2.0
- Patched: 2.2.0
high evidence1 sourcefirst seen Nov 9
Read more →
HighCVSS 8.8CVE-2026-103002GHSA-3hch-x692-6qj3gpustack (pip)Affected >= 2.2.0, < 2.2.2 · Fixed in 2.2.2Advisory
A GitHub advisory says GPUStack's cluster_apiserver_proxy handler skipped resource-level authorization checks.
- Affected: gpustack (pip) >= 2.2.0, < 2.2.2
- Patched version: 2.2.2
high evidence1 sourcefirst seen Nov 10
Read more →
HighCVE-2026-88968GHSA-5xjx-9qx6-jcrv@anthropic-ai/claude-code (npm)Affected < 2.1.251 · Fixed in 2.1.251Advisory
GitHub published an advisory for a time-of-check to time-of-use race in the Claude Code Edit tool.
- Affected: @anthropic-ai/claude-code npm versions below 2.1.251
- Patched in 2.1.251
high evidence1 sourcefirst seen Nov 9
Read more →
Notion says a security incident at its vendor Fireworks AI may have exposed some Notion AI chat sessions.
- Affected: under 1% of Notion workspaces, per Notion
- Notion no longer serves open-weight models via Fireworks
high evidence3 sourcesfirst seen Nov 9
Read more, all 3 sources →
CVE-2026-102895GPUStackAdvisory
CVE-2026-102895 is an improper authentication flaw in GPUStack, listed in CISA's known exploited vulnerabilities catalog.
- CVE: CVE-2026-102895
- Code execution via POST /v2/inference-backends/from-yaml
high evidence1 sourcefirst seen Nov 9
Read more →
Microsoft's FORGE Lab published a post saying it uses agentic tools to find memory safety issues in Rust code.
high evidence1 sourcefirst seen Nov 9
Read more →
A Bluesky post links to an Ars Technica article claiming that Claude Code settings files have exposed thousands of secrets on GitHub.
Why it matters: If the claim holds, committed Claude Code settings files may leak API keys, so developers should check their repos and rotate any exposed secrets.
low evidence1 sourcefirst seen Nov 9
Read more →
A Hacker News post claims ChatGPT Desktop forwards the local SSH agent, letting an agent on a remote machine authenticate with local credentials, including pushing to private repos.
low evidence1 sourcefirst seen Nov 9
Read more →