GPUStack’s critical authentication-bypass flaw CVE-2026-102895 has been added to the U.S.
Cybersecurity and Infrastructure Security Agency’s Known Exploited Vulnerabilities catalog, months after the project’s developers disclosed that attackers had used it against a version 2.1.1 deployment. The flaw affects GPUStack versions before 2.2.0 and can give remote attackers unauthenticated administrator access, expose worker and cloud-provider secrets, and enable code execution on worker hosts, according to the project’s security advisory. CISA added the vulnerability on November 9 and set a November 12 remediation deadline for federal civilian agencies. CISA’s KEV record also flags the entry for forensic triage.
GPUStack’s get_current_user function trusts requests that appear to come from 127.0.0.1 when force_auth_localhost is false, which is the default. The advisory says a remote request can appear local when GPUStack sits behind a same-host reverse proxy or when an attacker sends a forged X-GPUStack-Real-IP: 127.0.0.1 header. Either route can make the application treat the request as the built-in administrator without checking credentials.
With administrator access, an attacker can enumerate and modify users, models, workers and configuration; create persistent administrator API keys; and read worker credentials and cloud-provider secrets. The advisory says the vulnerability was exploited against a GPUStack 2.1.1 deployment, where attackers created custom inference backends that opened reverse shells on worker hosts.
The flaw has a CVSS 3.1 score of 9.8. The project’s advisory lists all versions before 2.2.0 as affected and identifies GPUStack 2.2.0 as the fixed release. The update removes implicit administrator access for loopback requests and hardens how the service handles client-IP and forwarding headers.
CISA’s November 9 catalog entry names the issue as the GPUStack Improper Authentication Vulnerability and gives federal civilian agencies until November 12 to apply vendor mitigations. The catalog marks ransomware campaign use as unknown. The entry appears in the CISA Known Exploited Vulnerabilities catalog.
If this article helped you, please consider supporting our work. Every small contribution keeps Abijita.com independent and running.
GPUStack Auth Bypass Added to CISA KEV
