Exploit Attempts Target GPUStack Authentication Bypass (CVE-2026-102895)

Quick Takeaways

1. GPUStack versions before 2.2.0 are vulnerable to authentication bypass.
2. Attackers spoof X-Gpustack-Real-IP: 127.0.0.1 to impersonate a trusted local request.
3. Source IP 144.91.73.103 is probing GPUStack and other AI model endpoints.

Threat, Techniques, and Targets

CVE 2026 102895 affects GPUStack, open source software that manages GPU clusters for AI workloads. Versions before 2.2.0 contain an authentication bypass.

Attackers can send a spoofed X-Gpustack-Real-IP header that identifies the request as coming from 127.0.0.1. GPUStack then treats the request as trusted and bypasses authentication or access controls. For example, observed attempts sent a request to the root path with this header.

The observed source IP was 144.91.73.103. In addition, that address requested AI related paths, including /v1/models, /v1/messages, and /models.

Impact, Security Implications, and Remediation

The flaw may let attackers bypass authentication and access controls on affected GPUStack systems. Therefore, exposed systems could face unauthorized access.

GPUStack 2.2.0 addresses the affected version range, according to the provided information. Upgrade to version 2.2.0 or later. Also, consult the GPUStack security advisory for vendor guidance.

Continue Your Tech Journey

Stay informed on the revolutionary breakthroughs in Quantum Computing research.

Access comprehensive resources on technology by visiting Wikipedia.

ThreatIntel-V1