GPUStack SAML login callback authentication bypass and account takeover
Anyone can log in as admin on this GPU AI server!
Summary
The GPUStack SAML callback trusts a response it never verifies, so any network client can log in as any existing user, including administrators. Versions from 0.7.1 until 2.2.2 are affected, even when SAML is not configured.
Affected when
- GPUStack 0.7.1 or later, before 2.2.2
- GPUStack server reachable over the network
What to do
Update to version 2.2.2 or later.
Products and platforms
CVE IDs
Times
First published
First seen