CVE-2026-102895Gpustack Authentication Bypass
GPUStack: Authentication bypass via trusted loopback source (reverse-proxy TCP peer or X-GPUStack-Real-IP header) grants unauthenticated admin
Published Nov 4, 2026 · Updated Nov 10, 2026 · Also known as EUVD-2026-117124, GHSA-gj9m-f8ph-pmhr
Key Facts
Patch immediately- CVE-2026-102895 is a critical-severity vulnerability (CVSS 9.8 v3.1) affecting Gpustack.
- It is exploited in the wild, listed in CISA KEV, Industry KEV feed, CIRCL KEV, ENISA EUVD since Jul 31, 2026. A public exploit is reported by tracking sources, but no code link is listed yet.
- EPSS estimates a 0.3% probability of exploitation in the next 30 days.
- Fixed versions are available, including Gpustack 2.2.0.
- Brandefense priority: patch immediately, because it is listed as exploited in the wild.
Scores
CVSS v3.1
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS (30-day exploit likelihood)
0.3%
Higher than 26.4% of all scored CVEs
Exploit maturity
Exploited (KEV)
ATLAS score
56/100
Publication score, see How it works
Exploitation Verdict
KEV listed
Nov 9, 2026
5 days after publication
Federal due date
Nov 12, 2026
2 days left
Ransomware use
Not reported
Attributed actors
None named
Exploit & Defence Guidance
Exploit maturity
Exploited (KEV)
Public exploit code
0
Proof-of-concept links
In-the-wild evidence
1
Reports of active use
Required action (CISA): Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Advisories And Exploit References
Description
GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0, get_current_user in gpustack/api/auth.py treated a loopback request source as the built-in administrator when force_auth_localhost was false, which was the default. A remote request could appear to originate from 127.0.0.1 because client_ip_getter accepted a same-host reverse proxy peer or a client-supplied X-GPUStack-Real-IP loopback value.
The bypass allowed unauthenticated administrative access, including user and model changes, persistent administrator API-key creation, disclosure of worker and cloud-provider secrets, and code execution through POST /v2/inference-backends/from-yaml. Exploitation was observed in the wild against a 2.1.1 deployment. This issue is fixed in version 2.2.0.
Known-Exploited Catalog Listings
| Catalog | Added | Remediation due | Ransomware use |
|---|---|---|---|
| CISA KEV | Nov 9, 2026 | Nov 12, 2026 | Not reported |
| Industry KEV feed | Jul 31, 2026 | Nov 12, 2026 | Not reported |
| CIRCL KEV | Nov 5, 2026 | Nov 12, 2026 | Not reported |
| ENISA EUVD | Nov 9, 2026 | n/a | Not reported |
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Affected Products
3 affected entries in total| Product | Affected versions | Fixed in |
|---|---|---|
| GpustackGpustack | See advisory | 2.2.0 |
Patched Releases
Gpustack
2.2.0
Timeline
Added to Industry KEV feed
Jul 31, 2026
Publicly disclosed
Nov 4, 2026
Added to CIRCL KEV
Nov 5, 2026
Added to CISA KEV
Nov 9, 2026
Added to ENISA EUVD
Nov 9, 2026
Last updated
Nov 10, 2026
Weakness Type
- CWE-287 Improper Authentication
- CWE-290 Authentication Bypass by Spoofing
- CWE-346 Origin Validation Error
References
- advisorycve.org · CVERecord
- advisorynvd.nist.gov · CVE-2026-102895
- advisoryGHSA advisory
- othercisa.gov · known-exploited-vulnerabilities-catalog
- othergithub.com · gpustack
FAQ
Common Questions.
GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning.
Affected: Gpustack. The full list is in the CVE brief.
It is exploited in the wild, listed in CISA KEV, Industry KEV feed, CIRCL KEV, ENISA EUVD since Jul 31, 2026.
Yes. It was added on Nov 9, 2026 with a federal remediation due date of Nov 12, 2026.
A public exploit is reported by tracking sources, but no code link is listed yet.
Fixed versions are available, including Gpustack 2.2.0.
Brandefense priority: patch immediately, because it is listed as exploited in the wild.
Is CVE-2026-102895 On Your Attack Surface?
Brandefense matches it against the products discovered on your perimeter and opens a finding the day a CVE like this is listed.
Request A Demo