A vulnerability was discovered in GPUStack, a GPU management and utilization platform, due to improper authentication. This allows unauthenticated users to perform administrative actions, including altering user and model settings, creating persistent administrator API keys, accessing worker and cloud-provider secrets, and executing code via the POST /v2/inference-backends/from-yaml endpoint. These actions can be performed remotely without requiring valid credentials. This vulnerability matters to people building or operating AI agents that utilize GPUStack, as it poses a significant risk of unauthorized access, data exposure, and system compromise.