CVE-2026-102895

GPUStack , an open-source GPU cluster manager for AI model serving, is vulnerable to an authentication bypass in versions prior to 2.2.0 . The root cause lies in gpustack/api/auth.py, where the get_current_user function treats loopback request sources as built-in administrators when force_auth_lo...