Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.1
CVE-2026-102894: GPUStack allows unauthorized login via SAML callback
CVE-2026-102894 · published 5 days ago
Summary
The GPUStack manager (versions 0.7.1 through 2.2.1) accepts SAML login data without checking its digital signature or other security checks. This means anyone could create or take over user accounts, including admin accounts, even if SAML authentication is not set up. Upgrade to version 2.2.2 or later to restore proper verification of SAML responses.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| gpustack | gpustack | >= 0.7.1, < 2.2.2 |
Original advisory text
GPUStack: SAML callback trusts an unverified SAMLResponse, allowing authentication bypass and account takeover
GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. From 0.7.1 until 2.2.2, the /auth/saml/callback endpoint decoded SAML XML, used its NameID and attributes to resolve or provision a user, and minted a gpustack_session JWT without calling OneLogin_Saml2_Auth.process_response to verify the signature, issuer, audience, destination, or time conditions. Any network client could submit an identity for an existing user, including an administrator, or provision a new non-administrator account, even when SAML was not configured. Response and Assertion identifiers were not consumed, so captured signed responses could also be replayed. This issue is fixed in version 2.2.2.
References
- https://github.com/gpustack/gpustack/releases/tag/v2.2.2 URL
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/102xxx/CVE-2026-1028... Vendor Advisory
- https://github.com/gpustack/gpustack/commit/705edbe1b5feec63959306daecd640e1c70e... Patch
- https://github.com/gpustack/gpustack/commit/adc6d82be34e48390720a1361df616e2ea9d... Patch
- https://github.com/gpustack/gpustack/pull/5753 Patch
- https://github.com/gpustack/gpustack/pull/5923 Patch
- https://nvd.nist.gov/vuln/detail/CVE-2026-102894 Vendor Advisory
- https://github.com/gpustack/gpustack/security/advisories/GHSA-62m9-f875-rqw6 Vendor Advisory
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically
- Gives an attacker full control
Type
CWE-294Authentication Bypass by Capture-replay
CWE-347Improper Verification of Cryptographic Signature
Timeline
Published4 Nov 2026
Updated8 Nov 2026
First seen4 Nov 2026
Sources
CVE-2026-102894 · NVD
CVE-2026-102894 · MITRE
CVE-2026-102894 · OSV
GHSA-62m9-f875-rqw6 · GHSA
Track software like this
Free during beta