One forged header made you the admin of GPUStack. CISA gave agencies three days.
By Lior AharonovFounder, 7IT Solutions ·
What happened
On 9 November 2026 CISA added CVE-2026-102895, a GPUStack authentication flaw, to its exploited list, with a federal deadline of 12 November. The advisory rates it Critical, CVSS 9.8, fixed in 2.2.0. A request that looks like it came from localhost, through a same-host proxy or a forged X-GPUStack-Real-IP header, is treated as the built-in admin.
Why it matters
GPUStack runs your self-hosted models. Whoever gets in as admin can change users and models, create admin API keys and read worker and cloud-provider secrets, CISA says. The advisory says it was exploited against a v2.1.1 deployment.
What to do
Upgrade every GPUStack install to 2.2.0 today, set force_auth_localhost=true and strip X-GPUStack-Real-IP at your proxy. If the API was reachable, rotate the worker and cloud secrets and look for admin keys you did not create.
My take
Lior Aharonov
Founder, 7IT Solutions
Trusting localhost is trusting whoever stands closest to your proxy. That is never just you.
Sources
| CISA: CISA Adds Four Known Exploited Vulnerabilities to Catalog | cisa.gov |
| GPUStack security advisory GHSA-gj9m-f8ph-pmhr | github.com |
Researched with AI tools; every fact is checked against the linked sources.