Is CVE-2026-103002 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-103002 being exploited in the wild.

How severe is CVE-2026-103002?

High severity, with a CVSS score of 8.8, published 4 November 2026.

Which products and versions are affected?

GPUStack 2.2.0 until 2.2.2; gpustack (PyPI) >= 2.2.0, < 2.2.2, ECOSYSTEM:introduced=2.2.0,fixed=2.2.2.

Is there a fix for CVE-2026-103002?

Yes. gpustack (PyPI): upgrade to 2.2.2 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-103002 attacked?

It is attacked over the network, in a software library.

Am I affected by CVE-2026-103002?

Check whether you run GPUStack or gpustack (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-103002: GPUStack cluster_apiserver_proxy authorization bypass

Q: Is there a fix for CVE-2026-103002?

Yes. gpustack (PyPI): upgrade to 2.2.2 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

Q: How is CVE-2026-103002 attacked?

It is attacked over the network, in a software library.

Q: Am I affected by CVE-2026-103002?

Check whether you run GPUStack or gpustack (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-103002 · Severity: high · CVSS 8.8 · Published 2026-11-04

GPUStack is an open-source GPU cluster manager for AI workloads. A flaw in versions 2.2.0–2.2.2 allowed authenticated users without administrator privileges to bypass authorization checks and access a Kubernetes cluster's API server through the proxy. Attackers could read sensitive data, create or modify workloads, or delete resources, potentially executing code in the target cluster.

Technologies: GPUStack, gpustack (PyPI). Vendors: GPUStack, PyPI.

Quick answers

Is CVE-2026-103002 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-103002 being exploited in the wild.
How severe is CVE-2026-103002?: High severity, with a CVSS score of 8.8, published 4 November 2026.
Which products and versions are affected?: GPUStack 2.2.0 until 2.2.2; gpustack (PyPI) >= 2.2.0, < 2.2.2, ECOSYSTEM:introduced=2.2.0,fixed=2.2.2.
Is there a fix for CVE-2026-103002?: Yes. gpustack (PyPI): upgrade to 2.2.2 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-103002 attacked?: It is attacked over the network, in a software library.
Am I affected by CVE-2026-103002?: Check whether you run GPUStack or gpustack (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

gpustack (PyPI): upgrade to 2.2.2 or later
```
pip install "gpustack>=2.2.2"
```

Technical details

The cluster_apiserver_proxy handler forwarded authenticated non-administrator requests to a Kubernetes cluster's API server using a worker's ServiceAccount credentials without resource-level authorization checks. The proxy was gated only on cluster visibility (satisfied by default access grants), allowing callers to read arbitrary cluster resources and drive the API. The fix restricts non-administrator access to read-only operations within the worker.gpustack.ai API group and the caller's namespace.

Affected products

GPUStack GPUStack 2.2.0 until 2.2.2

Identifiers

CVE-2026-103002
GHSA-3hch-x692-6qj3

Timeline

2026-11-04: disclosed

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.