GPUStack Security Update Advisory (CVE-2026-102895)
Overview A vulnerability in GPUStack that allows authentication bypass, identified as CVE-2026-102895, has been discovered. This vulnerability is related to the use of a trusted loopback source(trusted local connection source) and the reverse-proxy TCP peer or X-GPUStack-Real-IP header, and can be exploited to gain administrative privileges without authentication. Target Products
