SANS Internet Storm Center has reported new requests targeting CVE-2026-102895, a critical GPUStack authentication bypass. Its November 12 diary describes requests carrying a forged client-IP header that claims a loopback origin, alongside probes for other AI-service endpoints. GPUStack manages GPU clusters used for AI workloads.
The observed source, 144.91.73[.]103, submitted requests containing X-Gpustack-Real-IP set to a loopback address. These observations provide a detection lead; the diary does not establish that those requests compromised a GPUStack deployment.
The maintainer advisory, published July 31, covers versions before 2.2.0. With the default localhost-trust behavior, a request treated as loopback can receive administrator access without credentials. A same-host reverse proxy can also trigger the flaw without a forged header.
Administrative access can expose provider secrets and enable code execution on worker hosts through privileged functionality. The advisory separately records exploitation against a 2.1.1 deployment.
Operators should upgrade to 2.2.0 or later. Documented temporary measures include enabling force_auth_localhost=true, stripping client-supplied real-IP headers at the edge and restricting API access to trusted networks.
