CISAAnalysisCISA adds GPUStack improper authentication flaw to KEV catalog
What happened.The Cybersecurity and Infrastructure Security Agency added an actively exploited authentication bypass vulnerability in GPUStack to its Known Exploited Vulnerabilities catalog.
Why it matters.GPUStack orchestrates graphics processing clusters for large language model inference workloads. When reverse-proxy header spoofing grants administrative control, attackers hijack compute infrastructure and steal proprietary model weights. Platform engineers must upgrade GPUStack deployments to version 2.2.0 immediately. Administrators should ensure loopback proxy authentication is strictly enforced across internal load balancers.
The technical specifications:
- Vulnerability mechanics: Tracked as CVE-2026-102895 with a 9.8 CVSS score, the defect lets remote unauthenticated attackers bypass access controls.
- Header spoofing: The flaw occurs when force_auth_localhost is disabled, allowing external network callers to spoof the X-GPUStack-Real-IP reverse-proxy header.
- Administrative takeover: Intruders gain administrative privileges to manipulate model deployments, generate persistent API keys, and expose secrets.
- Remote code execution: Attackers chain administrative privileges with the POST /v2/inference-backends/from-yaml endpoint to execute arbitrary system code.
- Remediation directive: CISA set an emergency remediation deadline under BOD 26-04, while GPUStack maintainers released version 2.2.0 to enforce strict authentication.