Vulnerability
Published 2026-11-09
Verified 2026-10-24
GPUStack GPUStack (CVE-2026-102895)
GPUStack Improper Authentication Vulnerability. GPUStack contains an improper authentication vulnerability which could allow unauthenticated administrative access, including user and model changes, persistent administrator API-key creation, disclosure of worker and cloud-provider secrets, and code execution through POST /v2/inference-backends/from-yaml. Apply vendor mitigations.
Check the NVD record and the vendor advisory for affected versions and the patch.
- Product
- GPUStack GPUStack
- Exploited in Australia?
- unknown
- Primary: NVD
- Vendor: CISA KEV
- CVE: CVE-2026-102895
