CVE-2026-102895
GPUStack Improper Authentication Vulnerability
What is it?
GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0, get_current_user in gpustack/api/auth.py treated a loopback request source as the built-in administrator when force_auth_localhost was false, which was the default. A remote request could appear to originate from 127.0.0.1 because client_ip_getter accepted a same-host reverse proxy peer or a client-supplied X-GPUStack-Real-IP loopback value. The bypass allowed unauthenticated administrative access, including user and model changes, persistent administrator API-key creation…
Official description from NVD.
What happened
GPUStack contains an improper authentication vulnerability allowing unauthenticated administrative access, including persistent API key creation and code execution via POST /v2/inference-backends/from-yaml. CISA added CVE-2026-102895 to its Known Exploited Vulnerabilities catalog with a federal patch deadline of November 12, 2026. Organizations running GPUStack should immediately apply patches or remove the service from internet exposure.
From the Intel60 brief of Nov 9, 2026. AI-written summary: check the sources before acting.
Intel60 briefs
- CriticalCISA adds GPUStack auth bypass to KEV catalogNov 9, 2026