CVE-2026-58658 Details

A vulnerability allowing unauthenticated information disclosure has been identified in GPUStack versions through 2.2.1. This issue arises from unprotected '/serveLogs' and '/debug' endpoints on the worker port, defaulting to 10150 and bound to 0.0.0.0. Exploitation of this vulnerability enables unauthorized access to sensitive inference logs, which include prompts and completions, as well as the ability to modify worker configuration by changing log levels and accessing memory profiling data. The vulnerability exists because the debug and log routers are mounted without authentication, unlike other worker routers that require authentication. This flaw allows attackers to enumerate model instance IDs and stream serving logs, all without any authentication.

Users can update to GPUStack version 2.2.2 or later, where this vulnerability has been patched. Instructions for updating can be found in the GPUStack documentation.