What happened
GPUStack contains an improper authentication vulnerability, tracked as <code>CVE-2026-102895</code>. The flaw could permit unauthenticated administrative access, including changing users and models, creating persistent administrator API keys, disclosing worker and cloud-provider secrets, and executing code through <code>POST /v2/inference-backends/from-yaml</code>. The exposed service can be attacked directly over a network, with no prior access or user action required. Exploitation is confirmed active in the wild, and the vulnerability is listed on CISA KEV. Its severity is critical, with an NVD score of 9.8. A fix is available; the supplied patch-status information does not name a fixed version.
Who is affected
Organisations running GPUStack versions earlier than 2.2.0 are within the stated affected scope. The supplied information does not identify other affected products or versions. The attack condition is a GPUStack service that is exposed and reachable over a network; no user interaction is required.
Recommended actions
- Apply the available vendor fix to affected GPUStack deployments. Confirm the applicable fixed version through the vendor’s advisory, as the supplied patch information does not specify one.
- Restrict network exposure of GPUStack services so that they are not reachable by unauthorised network sources.
- Place access control in front of GPUStack services and segment them from other systems to limit direct access to an exposed service.
