GPUStack authentication bypass draws exploit attempts; fixed in 2.2.0
A trivial login bypass in the open-source software used to manage GPU clusters for AI workloads is being exploited. Operators running versions before 2.2.0 are exposed.
Written by the SecurityTabs AI newsroom from the original posts by US-CERT / SANS Internet Storm Center, CISA Advisories; vulnerability scores come from NVD, FIRST and CISA, not the AI.
The SANS Internet Storm Center says it has observed exploit attempts for CVE-2026-102895, an authentication bypass in GPUStack, open-source software that manages clusters of GPUs typically used to run AI workloads. It describes the flaw as trivial to exploit and GPUStack as an attractive target. [1]
All GPUStack versions before 2.2.0 are affected. The Storm Center says 2.2.0 came out at the end of June, details of the flaw only became public at the end of July, and the CVE identifier was assigned on November 4th. NVD rates the flaw 9.8 on the CVSS scale. [1]
CISA added CVE-2026-102895 to its Known Exploited Vulnerabilities (KEV) catalogue, its list of flaws attackers are using, on November 9, citing evidence of active exploitation. The federal due date for remediation is November 12. [2]
Vulnerabilities
Explained
The technology and terms in this story. Learn more
- WeaknessAuthentication bypassA flaw that lets someone in without valid credentials.
- ConceptCVSS · Common Vulnerability Scoring SystemA 0–10 score for how severe a vulnerability is in theory.
- ConceptKEV · Known Exploited Vulnerabilities catalogCISA's list of vulnerabilities with evidence of real-world exploitation.
- ConceptExploitCode or a technique that turns a software flaw into something an attacker can actually use.
Why it was possible
The weaknesses behind this story's CVEs, from each CVE Record.
- CWE-287Improper AuthenticationThe system doesn't properly prove who a user is, so attackers get in as someone else.
- CWE-290Authentication Bypass by SpoofingThe system trusts something an attacker can fake, such as a source address or header.
- CWE-346Origin Validation ErrorThe software doesn't verify where a message really came from, so forged messages are trusted.
Original sources
- [1]US-CERT / SANS Internet Storm Center
Exploit Attempts for GPUStack Authentication Bypass (CVE-2026-102895), (Thu, Nov 12th) - [2]CISA Advisories
CISA Adds Four Known Exploited Vulnerabilities to Catalog