Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.8
CVE-2026-102895: gpustack permits unauthenticated admin access
CVE-2026-102895 · published 5 days ago · actively exploited
Summary
The gpustack service does not properly verify who is logging in, so an outsider could gain full administrative control. With that access they could change user accounts, create permanent API keys, view hidden cloud credentials, and run arbitrary code on the system. Apply the vendor's security update immediately and ensure that the service is only reachable by trusted networks or strong authentication methods.
What to do
- Update gpustack to version 2.2.0.
- Update gpustack gpustack to version 2.2.0 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| – | gpustack | gpustack | < 2.2.0 |
| pip | – | gpustack |
< 2.2.0 Fix: upgrade to 2.2.0
|
Original advisory text
GPUStack: Authentication bypass via trusted loopback source (reverse-proxy TCP peer or X-GPUStack-Real-IP header) grants unauthenticated admin
GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0, get_current_user in gpustack/api/auth.py treated a loopback request source as the built-in administrator when force_auth_localhost was false, which was the default. A remote request could appear to originate from 127.0.0.1 because client_ip_getter accepted a same-host reverse proxy peer or a client-supplied X-GPUStack-Real-IP loopback value. The bypass allowed unauthenticated administrative access, including user and model changes, persistent administrator API-key creation, disclosure of worker and cloud-provider secrets, and code execution through POST /v2/inference-backends/from-yaml. Exploitation was observed in the wild against a 2.1.1 deployment. This issue is fixed in version 2.2.0.
References
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/102xxx/CVE-2026-1028... Vendor Advisory
- https://github.com/gpustack/gpustack/commit/53f42a6a553542974396d16a4ff6b12bcbed... Patch
- https://github.com/gpustack/gpustack/pull/5346 Patch
- https://nvd.nist.gov/vuln/detail/CVE-2026-102895 Vendor Advisory
- https://github.com/gpustack/gpustack/releases/tag/v2.2.0 URL
- https://github.com/gpustack/gpustack/security/advisories/GHSA-gj9m-f8ph-pmhr Vendor Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-... URL
- https://github.com/advisories/GHSA-gj9m-f8ph-pmhr
Internet-facing
3 days
and check for signs of compromise
Internal
3 days
and check for signs of compromise
- Known to be exploited
- Can be exploited automatically
- Gives an attacker full control
Known exploited
Listed in the CISA KEV catalogue - exploitation confirmed in the wild.
<1%
chance of attack within 30 days
Type
CWE-287Improper Authentication
CWE-290Authentication Bypass by Spoofing
CWE-346Origin Validation Error
Timeline
Published4 Nov 2026
Updated10 Nov 2026
First seen4 Nov 2026
Sources
CVE-2026-102895 · NVD
CVE-2026-102895 · MITRE
CVE-2026-102895 · OSV
GHSA-gj9m-f8ph-pmhr · GHSA
CVE-2026-102895 · CISA KEV
Track software like this
Free during beta