Security Advisory

GPUStack Security Update Advisory (CVE-2026-102895)

  • Nov 11 2026
GPUStack Security Update Advisory (CVE-2026-102895)

Overview

A vulnerability in GPUStack that allows authentication bypass, identified as CVE-2026-102895, has been discovered. This vulnerability is related to the use of a trusted loopback source(trusted local connection source) and the reverse-proxy TCP peer or X-GPUStack-Real-IP header, and can be exploited to gain administrative privileges without authentication.

Target Products

  • GPUStack version 2.2.0 or earlier.

Solution Details

  • The latest update includes Vulnerability Patches. – You must update to the latest version with Vulnerability Patches, following the instructions on the reference website.

Note

  • CVE-2026-102895. – GPUStack version 2.2.0 or later is verified based on the patch versions listed on the reference site.

Tags:
Previous Post

Next Post