Threats tagged 'ghsa-62m9-f875-rqw6'

A critical authentication bypass vulnerability exists in gpustack versions from 0.7.1 up to but not including 2.2.2. The SAML callback endpoint processes unverified SAML responses without validating signatures or other security checks, allowing attackers with network access to authenticate as any user, including administrators, or provision new non-admin users. This leads to full account takeover and potential control over the deployment and managed infrastructure. The issue affects all deployments regardless of whether SAML SSO is configured. The vulnerability is fixed in gpustack 2.2.2 by enforcing proper SAML response validation and restricting callback routes to active providers only.