Type Vulnerability
CISA has added four new vulnerabilities to its known-exploited catalogue, based on evidence of active exploitation.
Gpustack · Auth bypass
GPUStack Authentication Bypass Vulnerability
CVE-2026-102895
What this means
This is rated critical severity (9.8 out of 10). It is on the known-exploited catalogue, which means attacks using it have already been seen. Ask IT whether Gpustack Gpustack is in your estate, and treat that as the priority.
Full vendor description
GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0, get_current_user in gpustack/api/auth.py treated a loopback request source as the built-in administrator when force_auth_localhost was false, which was the default. A remote request could appear to originate from 127.0.0.1 because client_ip_getter accepted a same-host reverse proxy peer or a client-supplied X-GPUStack-Real-IP loopback value. The bypass allowed unauthenticated administrative access, including user and model changes, persistent administrator API-key creation, disclosure of worker and cloud-provider secrets, and code execution through POST /v2/inference-backends/from-yaml. Exploitation was observed in the wild against a 2.1.1 deployment. This issue is fixed in version 2.2.0.
Scoring and exploitation
9.8/ 10
CVSS 3.1 base scoreCritical
Exploitable over the network without any account, and no one has to click or open anything. High impact on confidentiality, integrity and availability.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability
Longer bar: easier to attack
Attack vectorNetworkAV:N
Attack complexityLowAC:L
Privileges requiredNonePR:N
User interactionNoneUI:N
ScopeUnchangedS:U
Impact
Longer bar: more harm
ConfidentialityHighC:H
IntegrityHighI:H
AvailabilityHighA:H
- ~0.3% estimated chance of attack in 30 daysModel estimate (): a probability signal, not confirmed exploitation
- Exploited in the wild
- Yes — confirmed exploitation (US CISA )
- Not reported
- Listed product
- GPUStack
Weaknesses
CWE-287CWE-290CWE-346
Affected products ()
- Gpustack Gpustack
Show the raw CPE strings (1)
- cpe:2.3:a:gpustack:gpustack:*:*:*:*:*:*:*:*
References
5 links from the CVE record, grouped by site; the vendor's advisory comes first.
github.com4 linksVendor advisory
- 53f42a6a553542974396d16a4ff6b12bcbedb48d (opens in a new tab)Patch
- 5346 (opens in a new tab)Issue Tracking · Patch
- v2.2.0 (opens in a new tab)Release Notes
Show 1 more from github.com
- GHSA-gj9m-f8ph-pmhr (opens in a new tab)Mitigation · Vendor Advisory
cisa.gov1 link
- known-exploited-vulnerabilities-catalog (opens in a new tab)US Government Resource