Vendor
gpustack
Tracked since 5 Nov · latest article 5 Nov · RSS · API
None open
of 0 in the full CISA catalogue · all time
EPSS top 5%, not in KEV
usual rate
Exploited, by due date
No gpustack CVE is in the CISA KEV catalogue.
Patch cadence and exploit odds
How often CISA adds gpustack CVEs, how many have a fix, and where their exploit odds sit.
Added to CISA KEV per quarter
CISA has not added a gpustack CVE to KEV.
Fix listed
0 of 2 CVEs in coverage
2 CVEs have no vendor fix recorded yet.
EPSS percentile of each CVE
No EPSS scores are recorded for these CVEs.
Coverage1 article · all time
The latest article naming gpustack, in the shared story grammar.
1 article from 1 outlet since 5 Nov. Still developing; the latest report was 8 hours ago.
- Thu 5 Nov, 04:01 UTC. SecurityOnline, first report. GPUStack authentication flaw exploited to seize AI servers.
- CVE not in KEV
- No CVE
- Larger: an outlet’s first report
- Coverage over time
Show all 1 articles as a listHide the list
- Thu 5 NovDay 01
- GPUStack authentication flaw exploited to seize AI servers04:01 · SecurityOnline · First report
All CVEs in coverage2
Exploited first, then by EPSS
GPUStack: SAML callback trusts an unverified SAMLResponse, allowing authentication bypass and account takeover
9.1Critical1 articleGPUStack: Authentication bypass via trusted loopback source (reverse-proxy TCP peer or X-GPUStack-Real-IP header) grants unauthenticated admin
9.8Critical1 article