GPUStackの脆弱性により認可のない利用者がクラスターを乗っ取られるおそれ
Summary
GPUStackの2.2.0から2.2.2までに脆弱性があり、認証された一般ユーザーが認可チェックなしで接続先のKubernetesクラスターを操作できます。CVSSは8.8です。修正版の2.2.2で対応できます。
AI summary
Produced by SecPulse using an external AI model; it may contain mistakes. Check the original description and references below before acting on it.
GPUStackの2.2.0から2.2.2までに脆弱性があり、認証された一般ユーザーが認可チェックなしで接続先のKubernetesクラスターを操作できます。CVSSは8.8です。修正版の2.2.2で対応できます。
Original description The description as published by the source.
GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. From 2.2.0 until 2.2.2, cluster_apiserver_proxy forwarded an authenticated non-administrator's requests to a selected Kubernetes cluster without a resource-level authorization check. The proxy used a reachable worker's Kubernetes ServiceAccount credentials, so the caller could read sensitive resources, create or modify workloads, or delete resources according to that ServiceAccount's permissions. Exploitation required a Kubernetes-provider cluster with a reachable worker, and attacker-controlled workloads could result in code execution in the target cluster. This issue is fixed in version 2.2.2.
Source: CVE.org (CVE Program・cvelistV5) NVD