CISA adds GPUStack improper authentication flaw to KEV (CVE-2026-102895)
Original title: CISA KEV: GPUStack Improper Authentication Vulnerability — GPUStack GPUStack (CVE-2026-102895)
Unauthenticated callers can change users and models, create admin API keys, read secrets, and execute code.
CISA added CVE-2026-102895, an improper authentication flaw in GPUStack, to the Known Exploited Vulnerabilities catalog on November 9, 2026. It can allow unauthenticated administrative access, including user and model changes, persistent administrator API-key creation, disclosure of worker and cloud-provider secrets, and code execution through POST /v2/inference-backends/from-yaml. Stakeholders must apply vendor mitigations under BOD 26-04 by November 12, 2026, or discontinue use. Ransomware campaign use is listed as unknown.
Unconfirmed: The listing does not name attackers and marks ransomware use as unknown.
- The required-action due date is November 12, 2026.
- Code execution is possible through POST /v2/inference-backends/from-yaml.
- No affected or fixed version strings are stated.
- Known ransomware campaign use is listed as unknown.
Impact: Unauthenticated admin access, secret disclosure, and code execution
| Product | Affected |
|---|---|
| GPUStack | — |
- 1.Apply vendor mitigations under BOD 26-04 by November 12, 2026.
- 2.Discontinue use if mitigations are unavailable.
- 3.Evaluate each asset's internet exposure.
- CVEs
- CVE-2026-102895
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-102895 | Authentication bypass in GPUStack before 2.2.0 | 9.8 | <1% | KEVPoC | KEV |
From the original article
1 min read at cisa.govGPUStack contains an improper authentication vulnerability which could allow unauthenticated administrative access, including user and model changes, persistent administrator API-key creation, disclosure of worker and cloud-provider secrets, and code execution through POST /v2/inference-backends/from-yaml.
cisa.gov
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.