# CVE-2026-102895: GPUStack Improper Authentication Vulnerability

- Exploited (CISA KEV): yes, added 2026-11-09
- Published: 2026-11-04
- CVSS: 9.8 CRITICAL (v3.1)
- EPSS: 0.3% (26th percentile)
- CWE: CWE-287, CWE-290, CWE-346

GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0, get_current_user in gpustack/api/auth.py treated a loopback request source as the built-in administrator when force_auth_localhost was false, which was the default. A remote request could appear to originate from 127.0.0.1 because client_ip_getter accepted a same-host reverse proxy peer or a client-supplied X-GPUStack-Real-IP loopback value. The bypass allowed unauthenticated administrative access, including user and model changes, persistent administrator API-key creation, disclosure of worker and cloud-provider secrets, and code execution through POST /v2/inference-backends/from-yaml. Exploitation was observed in the wild against a 2.1.1 deployment. This issue is fixed in version 2.2.0.

## Edge WAF coverage (claimed by vendors, not measured)

| Vendor | Status | First rule | Days after publication |
|---|---|---|---|
| Cloudflare | No public claim | — | — |
| AWS | No public claim | — | — |
| Microsoft Azure | No public claim | — | — |
| Google Cloud | No public claim | — | — |
| Fastly | No public claim | — | — |
| Vercel | No public claim | — | — |
| F5 | No public claim | — | — |
| Akamai | No public source | — | — |
| OWASP CRS | No public claim | — | — |

## Social

43 posts seen since 2026-11-04.

- x 2026-11-09: 🚨 CVE-2026-102895 — CRITICAL — actively exploited per CISA KEV GPUStack GPUStack  CVSS 9.8 \| EPSS 0%  #CVE https://t.co/dl7VAEBMGd (https://x.com/threatpodium/status/2119894348368142548)
- mastodon 2026-11-09: CVE Alert: CVE-2026-102895 - gpustack - gpustack - https://www. redpacketsecurity.com/cve-aler t-cve-2026-102895-gpustack-gpustack/ # OSINT # ThreatIntel # CyberSecurity # cve -2026-102895 # gpustack # (https://mastodon.social/@RedPacketSecurity/117588348279342811)
- x 2026-11-09: CVE-2026-102895 · Exploração conhecida (KEV da CISA) · CVSS 9,8 (Crítica) CISA inclui na lista de exploradas uma falha de autenticação do GPUStack  #KEV #CVE (https://x.com/breachbriefing/status/2119884520732123486)
- x 2026-11-09: CVE-2026-102895: GPUStack (open-source GPU cluster manager for AI serving) treated any credential-less request "from 127.0.0.1" as the built-in admin. Exploited in the wild, added to CISA KEV today with a 3-day deadline. 🧵 https://t.co/vJu4bvx7VU (https://x.com/SecureCMD/status/2119884462062227486)
- bluesky 2026-11-09: 5. CVE-2026-102895 · 9 people 🔥 🟥 Critical 9.8 · gpustack  GPUStack: Authentication bypass via trusted loopback source (reverse-proxy TCP peer or X-GPUStack-Real-IP header) grants unauthenticated admin (https://bsky.app/profile/alt.pds.lefht.cc/post/3mzvn7enkus2e)

"No public claim" means no vendor statement names this CVE; "Before feed history" means the CVE is older than the vendor feed. In both cases generic rules may still block it.

HTML: https://cve.vigilbase.com/cve/CVE-2026-102895 · JSON: https://cve.vigilbase.com/api/v1/cves/CVE-2026-102895