SAML Vulnerability in GPUStack Open-Source GPU Cluster Management

CVE-2026-102894

What is CVE-2026-102894?

A significant SAML authentication bypass feature within GPUStack allows unauthorized access to user accounts, including administrative rights. Versions 0.7.1 to 2.2.2 fail to correctly validate SAML XML signatures and attributes when using the /auth/saml/callback endpoint. This weakness permits any unauthorized network client to submit an identity and gain user access or create new user accounts, compromising the application's security. Additionally, response and assertion identifiers are not effectively managed, posing a risk of replay attacks through captured signed responses. This vulnerability has been resolved in version 2.2.2.

References