CISA adds GPUStack improper authentication flaw to KEV catalog
What happened.The Cybersecurity and Infrastructure Security Agency added an actively exploited authentication bypass vulnerability in GPUStack to its Known Exploited Vulnerabilities catalog.
Why it matters.GPUStack orchestrates graphics processing clusters for large language model inference workloads. When reverse-proxy header spoofing grants administrative control, attackers hijack compute infrastructure and steal proprietary model weights. Platform engineers must upgrade GPUStack deployments to version 2.2.0 immediately. Administrators should ensure loopback proxy authentication is strictly enforced across internal load balancers.