Ai

CVE-2026-58658: GPUStack Worker Ports Leaked LLM Prompts and Completions With No Authentication

GPUStack, an open-source GPU cluster manager for vLLM/SGLang/TensorRT-LLM inference, shipped worker debug and log-streaming endpoints with zero authentication — letting anyone who can reach the worker port read live prompts, completions, and memory profiles.