CVE-2026-111671
7.1HighPublished 16 Oct 2026 · NVD status: Deferred · AI triage by gemini-3.8-flash
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
- Impact
- High impact on availability
- Weakness
- CWE-639
Impact
Authenticated users can stop, reset, clear, or redeploy other tenants' notebooks and inference services by cycling resource IDs. This allows any low-privileged user to delete running pods and bring down production workloads.
Root cause
Lifecycle management endpoints fail to verify ownership before performing destructive actions on notebook and serving objects requested by ID.
Affected systems
Cube-studio through 2026.09.01
CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
Fix & remediation
No patched version is specified in the advisory; restrict network access to trusted users and block unauthorized requests to lifecycle endpoints in view_notebook.py, view_inferenceserving.py, and view_serving.py at the API gateway or reverse proxy.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
Cube-studio through 2026.09.01 contains an insecure direct object reference vulnerability that allows authenticated users to stop, reset, clear or redeploy other users' notebooks and services by id. Attackers can pass sequential ids to lifecycle endpoints in view_notebook.py, view_inferenceserving.py and view_serving.py to delete pods and take production inference endpoints offline.
References
- https://github.com/data-infra/cube-studio/blob/v2026.09.01/myapp/views/view_inferenceserving.py#L805-L915
- https://github.com/data-infra/cube-studio/blob/v2026.09.01/myapp/views/view_notebook.py#L784-L873
- https://github.com/data-infra/cube-studio/blob/v2026.09.01/myapp/views/view_serving.py#L184-L203
- https://hackmd.io/@hieuPenguinnn/cube-studio-idor-expose-api-lifecycle
- https://www.vulncheck.com/advisories/cube-studio-through-2026.09.01-idor-via-notebook-and-serving-lifecycle-endpoints