Security · High impactFan score 47 · Tier B
GPUStack: Authentication bypass via trusted loopback source (reverse-proxy TCP peer or X-GPUStack-Real-IP header) grants unauthenticated admin (CVE-2026-102895)
The Brief
- GPUStack before v2.2.0 treats any request from a loopback source as the built-in administrator when forceauthlocalhost is False, which is the default.
- The loopback source can come from the reverse-proxy TCP peer or the X-GPUStack-Real-IP header, so a remote request can gain unauthenticated admin access.
- The issue is tracked as CVE-2026-102895 and was published in the GitHub Advisory Database on 2026-11-09.
Why it matters
Any GPUStack instance below v2.2.0 running with default settings can be taken over by an unauthenticated remote attacker who gets full administrator rights.
Who’s affected
- Teams running GPUStack before v2.2.0 with default settings
What to do
- Upgrade GPUStack to v2.2.0 or later
- GPUStack 2.2.0
- CVE-2026-102895
- #gpustack
- #authentication
- #vulnerability
- #access-control
- #reverse-proxy
Affects gpustack. Impact In GPUStack before v2.2.0, getcurrentuser (in gpustack/api/auth.py) promotes any request whose source is considered loopback to the built-in administrator account when forceauthlocalhost is False (the default). The "source" is derived by clientipgetter…
Timeline
GitHub Advisory Database publishes advisory GHSA-gj9m-f8ph-pmhr
GitHub Advisory Database
GPUStack: Authentication bypass via trusted loopback source (reverse-proxy TCP peer or X-GPUStack-Real-IP header) grants unauthenticated admin (CVE-2026-102895)