CriticalCVSS9.82026-11-10
CVE-2026-102895 — GPUStack lets unauthenticated attackers act as administrator: explainer and fix (CVSS 9.8, fixed in 2.2.0, exploited)
Flaw in GPUStack, a GPU-cluster manager for serving AI models (pip gpustack before 2.2.0), CVSS 9.8. Per the advisory, the design trusts the network source of a request as proof of identity, so behind a same-host reverse proxy an unauthenticated request is treated as the administrator. The advisory reports exploitation against a v2.1.1 deployment, and CISA added it to KEV on 9 November (due 12 November). Fixed in 2.2.0. This site's view: updating is not enough; audit administrator API keys and revoke and reissue worker and cloud credentials.