pwned.coffeeOrder ticket · today's special · 9 Nov 2026

🔥 On the fly · exploited in the wildUS federal deadline passed 2026-11-12Scalding · 540°CcriticalOrder up · fix available

GPUStack Improper Authentication Vulnerability

gpustack

GPUStack contains an improper authentication vulnerability which could allow unauthenticated administrative access, including user and model changes, persistent administrator API-key creation, disclosure of worker and cloud-provider secrets, and code execution through POST /v2/inference-backends/from-yaml.

Binds US federal agencies under CISA BOD 26-04.CISA: agencies must also check for compromise (forensic triage, BOD 26-04).

Do this now

Upgrade GPUStack to 2.2.0 now, then rotate admin API keys and worker and cloud-provider secrets.

Who should check: teams running PyPI packages

Fix it

pip install --upgrade "gpustack>=2.2.0"

First seen: 9 Nov 2026
Last update: 12 Nov 2026, 12:17 UTC
Fixed in: gpustack 2.2.0
Identifiers: CVE-2026-102895
CVSS: 9.8
KEV deadline: 2026-11-12
Source: CISA KEV
On the menu as: PyPI packages

Check this repository for exposure to one security incident from pwned.coffee. Report first, change nothing until I say so.

## GPUStack Improper Authentication Vulnerability
Severity: critical, exploited in the wild. Patch status: patched.
Affected: gpustack
Fixed in: gpustack 2.2.0
Ids: CVE-2026-102895

GPUStack contains an improper authentication vulnerability which could allow unauthenticated administrative access, including user and model changes, persistent administrator API-key creation, disclosure of worker and cloud-provider secrets, and code execution through POST /v2/inference-backends/from-yaml.

## Steps
1. Search every lockfile and manifest (package-lock.json, yarn.lock, pnpm-lock.yaml, requirements*.txt, poetry.lock, uv.lock, composer.lock, go.sum, Cargo.lock, Gemfile.lock) for `gpustack`. For each hit, compare the installed version with the fix on the same major line: gpustack 2.2.0. If it's lower, give the exact upgrade command for the package manager this repo uses.

## Fix by release line
| Line | State | Fix | Until then |
|---|---|---|---|
| gpustack older than 2.2.0 | fixed | 2.2.0 | — |

## Report
A table: file, product or package, version in use, affected yes/no, exact fix. Then anything a human has to check outside the repo.

If you have the pwned.coffee MCP server (https://pwned.coffee/mcp), call lookup_cve("CVE-2026-102895") for the latest, and check_repo with this repo's lockfiles, Dockerfiles and workflows for a full receipt.
Sources: https://github.com/gpustack/gpustack/security/advisories/GHSA-gj9m-f8ph-pmhr https://nvd.nist.gov/vuln/detail/CVE-2026-102895 https://www.cisa.gov/news-events/alerts/2026/11/09/cisa-adds-four-known-exploited-vulnerabilities-catalog https://github.com/advisories/GHSA-gj9m-f8ph-pmhr https://github.com/gpustack/gpustack/commit/53f42a6a553542974396d16a4ff6b12bcbedb48d https://github.com/gpustack/gpustack/pull/5346 https://securityaffairs.com/202813/hacking/u-s-cisa-adds-ibm-signalwire-freeswitch-openssh-and-gpustack-flaws-to-its-known-exploited-vulnerabilities-catalog.html https://isc.sans.edu/diary/rss/33514
https://pwned.coffee/i/gpustack-improper-authentication-vulnerability-cve-2026-102895

Timeline

12 Nov 2026, 12:17 UTC
Reported by isc.sans.edu: Exploit Attempts for GPUStack Authentication Bypass (CVE-2026-102895), (Thu, Nov 12th)
10 Nov 2026, 22:17 UTC
Reported by securityaffairs.com: U.S. CISA adds IBM, SignalWire FreeSwitch, OpenSSH, and GPUStack flaws to its Known Exploited Vulnerabilities catalog
9 Nov 2026, 22:17 UTC
GitHub published advisory GHSA-gj9m-f8ph-pmhr (fixed: gpustack 2.2.0).
9 Nov 2026, 21:17 UTC
Reported by cisa.gov: CISA Adds Four Known Exploited Vulnerabilities to Catalog
9 Nov 2026, 17:17 UTC
Fix status: unknown → patched.
9 Nov 2026
First reported.

Receipt

Exploitation: Exploited: listed in CISA KEV
CISA KEV “CVE-2026-102895 added to CISA KEV on 2026-11-09, federal deadline 2026-11-12.” source
Report “Exploit Attempts for GPUStack Authentication Bypass (CVE-2026-102895), (Thu, Nov 12th).” source
Fix by release line: Product Affected Fixed in Source
gpustack (pip) < 2.2.0 2.2.0 GitHub advisory checked 9 Nov
Score: CVSS 9.8 (critical). CVSS 3.1 9.8 (CNA GitHub_M) for CVE-2026-102895
Last checked: 10 Nov 2026, 16:19 UTC

Product	Affected	Fixed in	Source
gpustack (pip)	< 2.2.0	2.2.0	GitHub advisory checked 9 Nov

Sources: KEV ✓ CVE record ✓ Vendor ✓

Sources

Follow on X

Totalone very hot coffee