Cube‑studio versions through 2026.09.01 contain an insecure direct object reference that allows authenticated users to manipulate lifecycle endpoints in the notebook and serving modules. By passing sequential resource identifiers to these endpoints, an attacker can stop, reset, clear or redeploy notebooks and services belonging to other users, effectively taking production inference endpoints offline. The vulnerability is a CWE‑639 weakness in which authorization checks fail for object operations, leading to unauthorized modification or deletion of user resources.

The affected product is Data‑Infra's Cube‑studio, with all releases up to and including 2026.09.01 vulnerable. No specific sub‑versions are listed beyond this cutoff, but the issue exists in every build before the mentioned release date.

The CVSS score of 7.1 indicates medium‑high severity. EPSS data is unavailable, and the vulnerability is not yet listed in CISA KEV, but it can be exploited by any authenticated user possessing normal access rights. No additional attacker setup is required; the attack vector is via the authenticated user interface or API. Because the exploit only requires valid credentials and sequential identifiers, it is relatively easy to automate once access is obtained. Organizations with internal user accounts are therefore at risk of internal sabotage or denial of service.