news
SANS Internet Storm Center, InfoCON: green
November 12th, 2026 at 11:56 AM

Exploit Attempts for GPUStack Authentication Bypass (CVE-2026-102895), (Thu, Nov 12th)

CVE-2026-102895 is a trivial authentication-bypass vulnerability. GPUStack is also an attractive target. It is open-source software that manages clusters of GPUs, which are typically used to run AI workloads. All versions of GPUStack prior to 2.2.0, which was released at the end of June. This vulnerability was not made public until the end of July, and the CVE was assigned on November 4th.

#ai
#product

Get stories like this every Monday

The week's most important AI news in one email. Free, unsubscribe anytime.

Score: 2.61

Engagement proxy: 0

Canonical link: https://isc.sans.edu/diary/rss/33514