Vendors / gpustack Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 2
Exploited now gpustack records in CISA KEV No gpustack vulnerabilities are listed in CISA KEV.
Priority HIGH 77
GPUStack through 2.2.1, fixed in commit 4e20551, contains an unauthenticated information disclosure vulnerability that allows unauthenticated attackers to access sensitive inference logs and modify worker configuration b…
CVSS 4.0 HIGH 8.8· Network · No auth · No interaction · EPSS 0.00535 · Published 2026-07-15 · Fixed CWE-306
Priority MEDIUM 49
GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00331 · Published 2026-11-04 · Fixed in 2.2.0 CWE-287
Priority MEDIUM 47
GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning.
CVSS 3.1 CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00259 · Published 2026-11-04 · Fixed in 2.2.2 CWE-294
Priority MEDIUM 40
GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.0036 · Published 2026-11-04 · Fixed in 2.2.2 CWE-639
Open these records in search → All records by CVSS severity
2 2 0 0 0
