CVE-2026-102895 | GPUStack up to 2.1.x Auth gpustack/api/auth.py get_current_user privileges management

November 4, 2026 Yanac

A vulnerability described as critical has been identified in GPUStack up to 2.1.x. The impacted element is the function get_current_user of the file gpustack/api/auth.py of the component Auth. Such manipulation leads to improper privilege management.

This vulnerability is referenced as CVE-2026-102895. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More