GPUStack 2.1.1 auth bypass added to CISA KEV catalog

On November 10, 2026, a developer posted on DEV Community a write-up claiming that a remote, unauthenticated request against GPUStack 2.1.1 could be turned into full administrator access by forging a single HTTP header, X-GPUStack-Real-IP: 127.0.0.1. The post said the underlying flaw lives in roughly 12 lines of code, and that the author reproduced the entire chain locally: the authentication bypass, the subsequent persistence on the affected system, and the fix. GPUStack was described as an open-source GPU cluster manager for serving AI workloads.

According to the same report, the vulnerability had already been weaponized: attackers used it against a real GPUStack 2.1.1 deployment. As a result, CISA added the issue to its Known Exploited Vulnerabilities catalog on November 9, 2026, setting November 12, 2026 as the remediation deadline for federal agencies. The write-up framed the significance as simple: one HTTP header turned a remote, unauthenticated request into full admin access, with no login required.

At this point, the available information comes solely from the developer's own disclosure. No patch release, advisory number, or statement from GPUStack maintainers appears in the material, so the current remediation status cannot be confirmed from the reporting provided.

What can be stated as fact is narrow: the affected version named is GPUStack 2.1.1, the exploit vector is the forged X-GPUStack-Real-IP: 127.0.0.1 header, the timeline places CISA's catalog addition on November 9, 2026, and the federal patch deadline is November 12, 2026. Whether the bypass requires network exposure to unauthenticated users, and what the full impact on deployments outside U.S. federal agencies might be, are not addressed in the source. Readers should treat the technical claims as developer-reported and unverified by independent analysis.