gpustack vulnerabilities
4 published CVEs name gpustack among the affected products; CISA lists 1 of them as exploited in the wild.
- 4Published CVEs4 of them scored
- 4Last 12 monthspublished in the last year
- 2Critical2 more rated high
- 1Known exploitedin CISA's KEV catalog
Known exploited
Newest addition to KEV first.
- CVE-2026-102895
GPUStack: Authentication bypass via trusted loopback source (reverse-proxy TCP peer or X-GPUStack-Real-IP header) grants unauthenticated admin
gpustack · gpustack
ExploitedCritical9.8