# GPUStack: Authentication bypass via trusted loopback source (reverse-proxy TCP peer or X-GPUStack-Real-IP header) grants unauthenticated admin (CVE-2026-102895)

Source: [GitHub Advisory Database](https://github.com/advisories/GHSA-gj9m-f8ph-pmhr) · 2026-11-09 · Security
Page: https://themorning.dev/story/gpustack-authentication-bypass-via-trusted-loopback-source-reverse-proxy-tcp-pee-e3fc024510b5aaac
Kind: security · Impact: high

## In brief

- GPUStack before v2.2.0 treats any request from a loopback source as the built-in administrator when forceauthlocalhost is False, which is the default.
- The loopback source can come from the reverse-proxy TCP peer or the X-GPUStack-Real-IP header, so a remote request can gain unauthenticated admin access.
- The issue is tracked as CVE-2026-102895 and was published in the GitHub Advisory Database on 2026-11-09.

## Why it matters

Any GPUStack instance below v2.2.0 running with default settings can be taken over by an unauthenticated remote attacker who gets full administrator rights.

## What to do

- Upgrade GPUStack to v2.2.0 or later

## Versions

- GPUStack 2.2.0

## CVEs

- CVE-2026-102895

## Timeline

- 2026-11-09: GitHub Advisory Database publishes advisory GHSA-gj9m-f8ph-pmhr

## Coverage

- [GPUStack: Authentication bypass via trusted loopback source (reverse-proxy TCP peer or X-GPUStack-Real-IP header) grants unauthenticated admin (CVE-2026-102895)](https://github.com/advisories/GHSA-gj9m-f8ph-pmhr) — GitHub Advisory Database, 2026-11-09

Tags: gpustack, authentication, vulnerability, access-control, reverse-proxy

---

Brief generated by AI (claude-haiku-5-5) from the reporting listed under Coverage. Headlines belong to their publishers. The Morning Dev – https://themorning.dev