GPUStack SAML callback flaw allows authentication bypass

First seen Nov 10 Updated Nov 10, 17:18 UTC Heat 71 high evidence

CriticalCVSS 9.1CVE-2026-102894GHSA-62m9-f875-rqw6gpustack (pip)Affected >= 0.7.1, < 2.2.2 · Fixed in 2.2.2Advisory

A GitHub advisory says GPUStack's SAML callback decodes a posted SAMLResponse and issues a session token without verifying it. Attackers need no credentials. They can authenticate as any identity by posting a response that names it. The advisory says all deployments are affected, whether or not SAML is configured.

What to do: Upgrade gpustack to 2.2.2 or later.
Who should care: Anyone running GPUStack with the endpoint reachable over a network.

Key facts

Affected: gpustack (pip) >= 0.7.1, < 2.2.2
Patched version: 2.2.2
CVSS score: 9

Timeline

Official

Nov 10, 15:57 UTC1h ago
GHSA-62m9-f875-rqw6: GPUStack: SAML callback trusts an unverified SAMLResponse, allowing authentication bypass and account takeovergithub.com · GitHub Advisory

Evidence

High evidence: the claim comes from an official source (the company or project itself), or at least two independent sites reported it.

Details written Nov 10, 17:17 UTC from the sources listed above.