{"history":[{"alert":0,"cve":"CVE-2026-102895","id":23026,"kind":"epss","observed_at":1794500401,"payload":"{\"date\": \"2026-11-12\", \"epss\": 0.00517, \"percentile\": 0.44486}"},{"alert":1,"cve":"CVE-2026-102895","id":20971,"kind":"cna","observed_at":1794349204,"payload":"{\"containers\": {\"adp\": [{\"metrics\": [{\"other\": {\"content\": {\"id\": \"CVE-2026-102895\", \"options\": [{\"Exploitation\": \"active\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"total\"}], \"role\": \"CISA Coordinator\", \"timestamp\": \"2026-11-05T00:00:00+00:00\", \"version\": \"2.0.3\"}, \"type\": \"ssvc\"}}, {\"other\": {\"content\": {\"dateAdded\": \"2026-11-09\", \"reference\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-102895\"}, \"type\": \"kev\"}}], \"providerMetadata\": {\"dateUpdated\": \"2026-11-10T04:55:56.196Z\", \"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\"}, \"references\": [{\"tags\": [\"government-resource\"], \"url\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-102895\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2026-11-09T00:00:00.000Z\", \"value\": \"CVE-2026-102895 added to CISA KEV\"}], \"title\": \"CISA ADP Vulnrichment\"}], \"cna\": {\"affected\": [{\"product\": \"gpustack\", \"vendor\": \"gpustack\", \"versions\": [{\"status\": \"affected\", \"version\": \"< 2.2.0\"}]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0, get_current_user in gpustack/api/auth.py treated a loopback request source as the built-in administrator when force_auth_localhost was false, which was the default. A remote request could appear to originate from 127.0.0.1 because client_ip_getter accepted a same-host reverse proxy peer or a client-supplied X-GPUStack-Real-IP loopback value. The bypass allowed unauthenticated administrative access, including user and model changes, persistent administrator API-key creation, disclosure of worker and cloud-provider secrets, and code execution through POST /v2/inference-backends/from-yaml. Exploitation was observed in the wild against a 2.1.1 deployment. This issue is fixed in version 2.2.0.\"}], \"metrics\": [{\"cvssV3_1\": {\"attackComplexity\": \"LOW\", \"attackVector\": \"NETWORK\", \"availabilityImpact\": \"HIGH\", \"baseScore\": 9.8, \"baseSeverity\": \"CRITICAL\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"scope\": \"UNCHANGED\", \"userInteraction\": \"NONE\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\", \"version\": \"3.1\"}}], \"problemTypes\": [{\"descriptions\": [{\"cweId\": \"CWE-287\", \"description\": \"CWE-287: Improper Authentication\", \"lang\": \"en\", \"type\": \"CWE\"}]}, {\"descriptions\": [{\"cweId\": \"CWE-290\", \"description\": \"CWE-290: Authentication Bypass by Spoofing\", \"lang\": \"en\", \"type\": \"CWE\"}]}, {\"descriptions\": [{\"cweId\": \"CWE-346\", \"description\": \"CWE-346: Origin Validation Error\", \"lang\": \"en\", \"type\": \"CWE\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2026-11-04T21:16:59.842Z\", \"orgId\": \"a0819718-46f1-4df5-94e2-005712e83aaa\", \"shortName\": \"GitHub_M\"}, \"references\": [{\"name\": \"https://github.com/gpustack/gpustack/security/advisories/GHSA-gj9m-f8ph-pmhr\", \"tags\": [\"x_refsource_CONFIRM\"], \"url\": \"https://github.com/gpustack/gpustack/security/advisories/GHSA-gj9m-f8ph-pmhr\"}, {\"name\": \"https://github.com/gpustack/gpustack/pull/5346\", \"tags\": [\"x_refsource_MISC\"], \"url\": \"https://github.com/gpustack/gpustack/pull/5346\"}, {\"name\": \"https://github.com/gpustack/gpustack/commit/53f42a6a553542974396d16a4ff6b12bcbedb48d\", \"tags\": [\"x_refsource_MISC\"], \"url\": \"https://github.com/gpustack/gpustack/commit/53f42a6a553542974396d16a4ff6b12bcbedb48d\"}, {\"name\": \"https://github.com/gpustack/gpustack/releases/tag/v2.2.0\", \"tags\": [\"x_refsource_MISC\"], \"url\": \"https://github.com/gpustack/gpustack/releases/tag/v2.2.0\"}], \"source\": {\"advisory\": \"GHSA-gj9m-f8ph-pmhr\", \"discovery\": \"UNKNOWN\"}, \"title\": \"GPUStack: Authentication bypass via trusted loopback source (reverse-proxy TCP peer or X-GPUStack-Real-IP header) grants unauthenticated admin\"}}, \"cveMetadata\": {\"assignerOrgId\": \"a0819718-46f1-4df5-94e2-005712e83aaa\", \"assignerShortName\": \"GitHub_M\", \"cveId\": \"CVE-2026-102895\", \"datePublished\": \"2026-11-04T21:16:59.842Z\", \"dateReserved\": \"2026-09-29T17:34:42.743Z\", \"dateUpdated\": \"2026-11-10T04:55:56.196Z\", \"state\": \"PUBLISHED\"}, \"dataType\": \"CVE_RECORD\", \"dataVersion\": \"5.2\"}"},{"alert":0,"cve":"CVE-2026-102895","id":20649,"kind":"epss","observed_at":1794327601,"payload":"{\"date\": \"2026-11-10\", \"epss\": 0.00555, \"percentile\": 0.46664}"},{"alert":0,"cve":"CVE-2026-102895","id":18873,"kind":"epss","observed_at":1794262800,"payload":"{\"date\": \"2026-11-09\", \"epss\": 0.00331, \"percentile\": 0.2646}"},{"alert":1,"cve":"CVE-2026-102895","id":18870,"kind":"cna","observed_at":1794262800,"payload":"{\"containers\": {\"adp\": [{\"metrics\": [{\"other\": {\"content\": {\"id\": \"CVE-2026-102895\", \"options\": [{\"Exploitation\": \"active\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"total\"}], \"role\": \"CISA Coordinator\", \"timestamp\": \"2026-11-09T16:50:07.009163Z\", \"version\": \"2.0.3\"}, \"type\": \"ssvc\"}}, {\"other\": {\"content\": {\"dateAdded\": \"2026-11-09\", \"reference\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-102895\"}, \"type\": \"kev\"}}], \"providerMetadata\": {\"dateUpdated\": \"2026-11-09T20:58:23.736Z\", \"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\"}, \"references\": [{\"tags\": [\"government-resource\"], \"url\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-102895\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2026-11-09T00:00:00.000Z\", \"value\": \"CVE-2026-102895 added to CISA KEV\"}], \"title\": \"CISA ADP Vulnrichment\"}], \"cna\": {\"affected\": [{\"product\": \"gpustack\", \"vendor\": \"gpustack\", \"versions\": [{\"status\": \"affected\", \"version\": \"< 2.2.0\"}]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0, get_current_user in gpustack/api/auth.py treated a loopback request source as the built-in administrator when force_auth_localhost was false, which was the default. A remote request could appear to originate from 127.0.0.1 because client_ip_getter accepted a same-host reverse proxy peer or a client-supplied X-GPUStack-Real-IP loopback value. The bypass allowed unauthenticated administrative access, including user and model changes, persistent administrator API-key creation, disclosure of worker and cloud-provider secrets, and code execution through POST /v2/inference-backends/from-yaml. Exploitation was observed in the wild against a 2.1.1 deployment. This issue is fixed in version 2.2.0.\"}], \"metrics\": [{\"cvssV3_1\": {\"attackComplexity\": \"LOW\", \"attackVector\": \"NETWORK\", \"availabilityImpact\": \"HIGH\", \"baseScore\": 9.8, \"baseSeverity\": \"CRITICAL\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"scope\": \"UNCHANGED\", \"userInteraction\": \"NONE\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\", \"version\": \"3.1\"}}], \"problemTypes\": [{\"descriptions\": [{\"cweId\": \"CWE-287\", \"description\": \"CWE-287: Improper Authentication\", \"lang\": \"en\", \"type\": \"CWE\"}]}, {\"descriptions\": [{\"cweId\": \"CWE-290\", \"description\": \"CWE-290: Authentication Bypass by Spoofing\", \"lang\": \"en\", \"type\": \"CWE\"}]}, {\"descriptions\": [{\"cweId\": \"CWE-346\", \"description\": \"CWE-346: Origin Validation Error\", \"lang\": \"en\", \"type\": \"CWE\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2026-11-04T21:16:59.842Z\", \"orgId\": \"a0819718-46f1-4df5-94e2-005712e83aaa\", \"shortName\": \"GitHub_M\"}, \"references\": [{\"name\": \"https://github.com/gpustack/gpustack/security/advisories/GHSA-gj9m-f8ph-pmhr\", \"tags\": [\"x_refsource_CONFIRM\"], \"url\": \"https://github.com/gpustack/gpustack/security/advisories/GHSA-gj9m-f8ph-pmhr\"}, {\"name\": \"https://github.com/gpustack/gpustack/pull/5346\", \"tags\": [\"x_refsource_MISC\"], \"url\": \"https://github.com/gpustack/gpustack/pull/5346\"}, {\"name\": \"https://github.com/gpustack/gpustack/commit/53f42a6a553542974396d16a4ff6b12bcbedb48d\", \"tags\": [\"x_refsource_MISC\"], \"url\": \"https://github.com/gpustack/gpustack/commit/53f42a6a553542974396d16a4ff6b12bcbedb48d\"}, {\"name\": \"https://github.com/gpustack/gpustack/releases/tag/v2.2.0\", \"tags\": [\"x_refsource_MISC\"], \"url\": \"https://github.com/gpustack/gpustack/releases/tag/v2.2.0\"}], \"source\": {\"advisory\": \"GHSA-gj9m-f8ph-pmhr\", \"discovery\": \"UNKNOWN\"}, \"title\": \"GPUStack: Authentication bypass via trusted loopback source (reverse-proxy TCP peer or X-GPUStack-Real-IP header) grants unauthenticated admin\"}}, \"cveMetadata\": {\"assignerOrgId\": \"a0819718-46f1-4df5-94e2-005712e83aaa\", \"assignerShortName\": \"GitHub_M\", \"cveId\": \"CVE-2026-102895\", \"datePublished\": \"2026-11-04T21:16:59.842Z\", \"dateReserved\": \"2026-09-29T17:34:42.743Z\", \"dateUpdated\": \"2026-11-09T20:58:23.736Z\", \"state\": \"PUBLISHED\"}, \"dataType\": \"CVE_RECORD\", \"dataVersion\": \"5.2\"}"},{"alert":1,"cve":"CVE-2026-102895","id":18865,"kind":"kev","observed_at":1794262800,"payload":"{\"cveID\": \"CVE-2026-102895\", \"cwes\": [\"CWE-287\", \"CWE-290\", \"CWE-346\"], \"dateAdded\": \"2026-11-09\", \"dueDate\": \"2026-11-12\", \"forensicTriage\": \"Yes\", \"knownRansomwareCampaignUse\": \"Unknown\", \"notes\": \"This vulnerability affects an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: ; https://github.com/gpustack/gpustack/security/advisories/GHSA-gj9m-f8ph-pmhr ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-102895\", \"product\": \"GPUStack\", \"requiredAction\": \"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\\u2019s \\u201cForensics Triage Requirements\\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.\", \"shortDescription\": \"GPUStack contains an improper authentication vulnerability which could allow unauthenticated administrative access, including user and model changes, persistent administrator API-key creation, disclosure of worker and cloud-provider secrets, and code execution through POST /v2/inference-backends/from-yaml.\", \"vendorProject\": \"GPUStack\", \"vulnerabilityName\": \"GPUStack Improper Authentication Vulnerability\"}"}],"record":{"affected":[{"product":"gpustack","vendor":"gpustack","versions":[{"status":"affected","version":"< 2.2.0"}]}],"cna":{"containers":{"adp":[{"metrics":[{"other":{"content":{"id":"CVE-2026-102895","options":[{"Exploitation":"active"},{"Automatable":"yes"},{"Technical Impact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-05T00:00:00+00:00","version":"2.0.3"},"type":"ssvc"}},{"other":{"content":{"dateAdded":"2026-11-09","reference":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-102895"},"type":"kev"}}],"providerMetadata":{"dateUpdated":"2026-11-10T04:55:56.196Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"references":[{"tags":["government-resource"],"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-102895"}],"timeline":[{"lang":"en","time":"2026-11-09T00:00:00.000Z","value":"CVE-2026-102895 added to CISA KEV"}],"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"product":"gpustack","vendor":"gpustack","versions":[{"status":"affected","version":"< 2.2.0"}]}],"descriptions":[{"lang":"en","value":"GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0, get_current_user in gpustack/api/auth.py treated a loopback request source as the built-in administrator when force_auth_localhost was false, which was the default. A remote request could appear to originate from 127.0.0.1 because client_ip_getter accepted a same-host reverse proxy peer or a client-supplied X-GPUStack-Real-IP loopback value. The bypass allowed unauthenticated administrative access, including user and model changes, persistent administrator API-key creation, disclosure of worker and cloud-provider secrets, and code execution through POST /v2/inference-backends/from-yaml. Exploitation was observed in the wild against a 2.1.1 deployment. This issue is fixed in version 2.2.0."}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-287","description":"CWE-287: Improper Authentication","lang":"en","type":"CWE"}]},{"descriptions":[{"cweId":"CWE-290","description":"CWE-290: Authentication Bypass by Spoofing","lang":"en","type":"CWE"}]},{"descriptions":[{"cweId":"CWE-346","description":"CWE-346: Origin Validation Error","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2026-11-04T21:16:59.842Z","orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M"},"references":[{"name":"https://github.com/gpustack/gpustack/security/advisories/GHSA-gj9m-f8ph-pmhr","tags":["x_refsource_CONFIRM"],"url":"https://github.com/gpustack/gpustack/security/advisories/GHSA-gj9m-f8ph-pmhr"},{"name":"https://github.com/gpustack/gpustack/pull/5346","tags":["x_refsource_MISC"],"url":"https://github.com/gpustack/gpustack/pull/5346"},{"name":"https://github.com/gpustack/gpustack/commit/53f42a6a553542974396d16a4ff6b12bcbedb48d","tags":["x_refsource_MISC"],"url":"https://github.com/gpustack/gpustack/commit/53f42a6a553542974396d16a4ff6b12bcbedb48d"},{"name":"https://github.com/gpustack/gpustack/releases/tag/v2.2.0","tags":["x_refsource_MISC"],"url":"https://github.com/gpustack/gpustack/releases/tag/v2.2.0"}],"source":{"advisory":"GHSA-gj9m-f8ph-pmhr","discovery":"UNKNOWN"},"title":"GPUStack: Authentication bypass via trusted loopback source (reverse-proxy TCP peer or X-GPUStack-Real-IP header) grants unauthenticated admin"}},"cveMetadata":{"assignerOrgId":"a0819718-46f1-4df5-94e2-005712e83aaa","assignerShortName":"GitHub_M","cveId":"CVE-2026-102895","datePublished":"2026-11-04T21:16:59.842Z","dateReserved":"2026-09-29T17:34:42.743Z","dateUpdated":"2026-11-10T04:55:56.196Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"cna_checked":1794457201,"cve":"CVE-2026-102895","description":"GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0, get_current_user in gpustack/api/auth.py treated a loopback request source as the built-in administrator when force_auth_localhost was false, which was the default. A remote request could appear to originate from 127.0.0.1 because client_ip_getter accepted a same-host reverse proxy peer or a client-supplied X-GPUStack-Real-IP loopback value. The bypass allowed unauthenticated administrative access, including user and model changes, persistent administrator API-key creation, disclosure of worker and cloud-provider secrets, and code execution through POST /v2/inference-backends/from-yaml. Exploitation was observed in the wild against a 2.1.1 deployment. This issue is fixed in version 2.2.0.","epss":{"date":"2026-11-12","epss":0.00517,"percentile":0.44486},"epss_checked":1794522003,"first_seen":1794262800,"kev":{"cveID":"CVE-2026-102895","cwes":["CWE-287","CWE-290","CWE-346"],"dateAdded":"2026-11-09","dueDate":"2026-11-12","forensicTriage":"Yes","knownRansomwareCampaignUse":"Unknown","notes":"This vulnerability affects an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: ; https://github.com/gpustack/gpustack/security/advisories/GHSA-gj9m-f8ph-pmhr ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-102895","product":"GPUStack","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","shortDescription":"GPUStack contains an improper authentication vulnerability which could allow unauthenticated administrative access, including user and model changes, persistent administrator API-key creation, disclosure of worker and cloud-provider secrets, and code execution through POST /v2/inference-backends/from-yaml.","vendorProject":"GPUStack","vulnerabilityName":"GPUStack Improper Authentication Vulnerability"},"kev_checked":1794522003,"products":"gpustack gpustack","references":["https://github.com/gpustack/gpustack/security/advisories/GHSA-gj9m-f8ph-pmhr","https://github.com/gpustack/gpustack/pull/5346","https://github.com/gpustack/gpustack/commit/53f42a6a553542974396d16a4ff6b12bcbedb48d","https://github.com/gpustack/gpustack/releases/tag/v2.2.0","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-102895"],"score":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","provider":"GitHub_M","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"solutions":"","state":"PUBLISHED","title":"GPUStack: Authentication bypass via trusted loopback source (reverse-proxy TCP peer or X-GPUStack-Real-IP header) grants unauthenticated admin","updated_at":1794500401,"workarounds":""},"sources":[{"canonical_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-102895","id":248,"publisher":"CISA KEV","title":"GPUStack Improper Authentication Vulnerability"},{"canonical_url":"https://securityaffairs.com/202813/hacking/u-s-cisa-adds-ibm-signalwire-freeswitch-openssh-and-gpustack-flaws-to-its-known-exploited-vulnerabilities-catalog.html","id":363,"publisher":"Security Affairs","title":"U.S. CISA adds IBM, SignalWire FreeSwitch, OpenSSH, and GPUStack flaws to its Known Exploited Vulnerabilities catalog"},{"canonical_url":"https://github.com/advisories/GHSA-gj9m-f8ph-pmhr","id":267,"publisher":"GitHub Advisory Database","title":"GPUStack: Authentication bypass via trusted loopback source (reverse-proxy TCP peer or X-GPUStack-Real-IP header) grants unauthenticated admin"}]}