GHSA-26wv-hf3j-hjjh
GPUStack versions through 2.2.1 contain an unauthenticated information disclosure vulnerability. This flaw allows attackers to access sensitive inference logs and modify worker configuration by exploiting unprotected /serveLogs and /debug endpoints on the worker port. Attackers can enumerate model instance IDs to stream logs with prompts and completions, change log levels, and read memory profiling data without authentication. The vulnerability is fixed in a commit identified as 4e20551. No official patch release version is specified.
AI Analysis
Technical Summary
GPUStack through version 2.2.1 has an unauthenticated information disclosure vulnerability (CWE-306) due to unprotected /serveLogs and /debug endpoints on the worker port. This allows unauthenticated attackers to enumerate model instance IDs, stream serving logs containing sensitive prompts and completions, modify worker log levels, and access memory profiling data. The vulnerability is addressed in commit 4e20551, but no formal patch release version is provided. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges or user interaction required, with high confidentiality impact and lower integrity impact.
Potential Impact
Attackers can gain unauthorized access to sensitive inference logs and worker configuration data without authentication. This exposure includes prompts and completions from model serving, log level settings, and memory profiling information. Such disclosure can lead to leakage of sensitive data and potential manipulation of worker behavior.
Mitigation Recommendations
A fix is available in commit 4e20551. Users should apply this fix or upgrade to a version that includes this commit to remediate the vulnerability. Until patched, restricting access to the /serveLogs and /debug endpoints and implementing authentication controls on the worker port may reduce exposure.
GHSA-26wv-hf3j-hjjh
Description
GPUStack versions through 2.2.1 contain an unauthenticated information disclosure vulnerability. This flaw allows attackers to access sensitive inference logs and modify worker configuration by exploiting unprotected /serveLogs and /debug endpoints on the worker port. Attackers can enumerate model instance IDs to stream logs with prompts and completions, change log levels, and read memory profiling data without authentication. The vulnerability is fixed in a commit identified as 4e20551. No official patch release version is specified.
CVSS v4.0
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
GPUStack through version 2.2.1 has an unauthenticated information disclosure vulnerability (CWE-306) due to unprotected /serveLogs and /debug endpoints on the worker port. This allows unauthenticated attackers to enumerate model instance IDs, stream serving logs containing sensitive prompts and completions, modify worker log levels, and access memory profiling data. The vulnerability is addressed in commit 4e20551, but no formal patch release version is provided. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges or user interaction required, with high confidentiality impact and lower integrity impact.
Potential Impact
Attackers can gain unauthorized access to sensitive inference logs and worker configuration data without authentication. This exposure includes prompts and completions from model serving, log level settings, and memory profiling information. Such disclosure can lead to leakage of sensitive data and potential manipulation of worker behavior.
Mitigation Recommendations
A fix is available in commit 4e20551. Users should apply this fix or upgrade to a version that includes this commit to remediate the vulnerability. Until patched, restricting access to the /serveLogs and /debug endpoints and implementing authentication controls on the worker port may reduce exposure.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-26wv-hf3j-hjjh
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-58658"]
- Ecosystems
- []
- Database Specific Severity
- HIGH
- Cvss Version
- 4.0
Threat ID: 6a58b44568715ace43d6aeaf
Added to database: 07/16/2026, 10:36:53 UTC
Last enriched: 07/16/2026, 11:23:49 UTC
Last updated: 07/17/2026, 01:25:08 UTC
Views: 6
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.