Exploit attempts target GPUStack auth bypass CVE-2026-102895

Active exploitation of CVE-2026-102895, a trivial authentication-bypass in GPUStack (open-source GPU cluster manager for AI workloads), is underway. The vulnerability affects all versions prior to 2.2.0, with a patch released in June but disclosure delayed until July and CVE assignment on November 4th. The targeting of GPU management infrastructure signals a focus on AI compute resources, potentially for cryptomining or data theft.

AI disclosure: Model-written summary of the source, not a verified fact. Check the sources. How Mosaic works