GPUStack authentication flaw CVE-2026-102895 exploited in the wild
First seen Nov 9 Updated Nov 10, 16:12 UTC Heat 45 high evidence
CVE-2026-102895 is an improper authentication flaw in GPUStack, listed in CISA's known exploited vulnerabilities catalog. It allows unauthenticated admin access, including user and model changes and persistent admin API-key creation. It also exposes worker and cloud-provider secrets and allows code execution through POST /v2/inference-backends/from-yaml.
- What to do
- Apply vendor mitigations now and rotate any worker or cloud secrets if exposed.
- Who should care
- Anyone running GPUStack, especially instances exposed to the internet.
Why it matters: Self-hosted GPUStack instances can be taken over without credentials, including secret theft and code execution, and the flaw is exploited in the wild.
Key facts
- CVE
- CVE-2026-102895
- Code execution via POST /v2/inference-backends/from-yaml
Timeline
Official
-
CVE-2026-102895: GPUStack Improper Authentication Vulnerability (actively exploited, CISA KEV)nvd.nist.gov ยท GitHub Advisory
Evidence
High evidence: the claim comes from an official source (the company or project itself), or at least two independent sites reported it.
Details written Nov 10, 16:10 UTC from the sources listed above.