Exploit Attempts for GPUStack Authentication Bypass (CVE-2026-102895), (Thu, Nov 12th)

SANS is seeing exploit attempts for CVE-2026-102895, a trivial authentication bypass in GPUStack, the open-source software used to manage GPU clusters for AI workloads. Spoofing the X-Gpustack-Real-IP header with a loopback address makes GPUStack treat a request as trusted and bypass authentication. The flaw affects all GPUStack versions before 2.2.0.