CVE-2026-102895: GPUStack Improper Authentication — Defending Against Active Exploitation and Unauthenticated Admin Access

---
title: GPUStack Unauthorized API Access Attempt
id: 8a7b9c4d-3e2f-4a1b-9c8d-7e6f5a4b3c2d
status: experimental
description: Detects unauthenticated access attempts to GPUStack administrative endpoints, particularly the inference-backends YAML endpoint.
references:
  - https://www.cisa.gov/known-exploited-vulnerabilities-catalog
  - https://attack.mitre.org/techniques/T1190/
author: Security Arsenal
date: 2026/11/09
tags:
  - attack.initial_access
  - attack.t1190
  - attack.persistence
logsource:
  category: webserver
  product: linux
detection:
  selection:
    cs-uri-stem|contains:
      - '/v2/inference-backends/from-yaml'
      - '/v2/users'
      - '/v2/api-keys'
    sc-status:
      - 200
      - 201
  condition: selection
falsepositives:
  - Legitimate administrative API usage from authorized IPs
level: high
---
title: GPUStack Service Spawning Suspicious Processes
id: 9b8c7d6e-5f4a-3b2c-1d0e-9f8a7b6c5d4e
status: experimental
description: Detects GPUStack worker or server processes spawning shell interpreters or unexpected command-line tools, indicating potential code execution via malicious YAML configurations.
references:
  - https://attack.mitre.org/techniques/T1059/
author: Security Arsenal
date: 2026/11/09
tags:
  - attack.execution
  - attack.t1059
  - attack.privilege_escalation
logsource:
  category: process_creation
  product: linux
detection:
  selection_parent:
    ParentImage|contains:
      - 'gpustack'
      - 'gpu-stack'
      - '/usr/local/bin/gpustack'
      - '/opt/gpustack'
  selection_child:
    Image|endswith:
      - '/bash'
      - '/sh'
      - '/python'
      - '/python3'
      - '/curl'
      - '/wget'
      - '/nc'
      - '/netcat'
  condition: selection_parent and selection_child
falsepositives:
  - Legitimate GPUStack administrative scripts
  - Health check scripts
level: high
---
title: GPUStack API Key Creation Anomaly
id: 1c2d3e4f-5a6b-7c8d-9e0f-1a2b3c4d5e6f
status: experimental
description: Detects API key creation events outside of normal administrative change windows or from unexpected source IPs.
references:
  - https://attack.mitre.org/techniques/T1136/
author: Security Arsenal
date: 2026/11/09
tags:
  - attack.persistence
  - attack.t1136
logsource:
  category: application
  product: linux
detection:
  selection:
    Message|contains:
      - 'API key created'
      - 'admin key generated'
      - 'POST /v2/api-keys'
  filter:
    SourceIP|cidr:
      - '10.0.0.0/8'
      - '172.16.0.0/12'
      - '192.168.0.0/16'
  condition: selection and not filter
falsepositives:
  - Legitimate external administrative access
  - CI/CD pipeline automation
level: medium

// Hunt for unauthenticated access to GPUStack administrative endpoints
Syslog
| where TimeGenerated > ago(7d)
| where ProcessName contains "gpustack" or ProcessName contains "gpu-stack"
| where SyslogMessage contains "/v2/inference-backends/from-yaml" or SyslogMessage contains "/v2/api-keys"
| where SyslogMessage contains "401" or SyslogMessage contains "403" // Failed auth (reconnaissance)
| summarize Attempts=count(), UniqueIPs=dcount(Computer) by SyslogMessage, Computer
| order by Attempts desc

// Detect successful exploitation - process spawning from GPUStack context
DeviceProcessEvents
| where TimeGenerated > ago(7d)
| where InitiatingProcessFileName contains "gpustack" or InitiatingProcessCommandLine contains "gpustack"
| where FileName in ("bash", "sh", "python", "python3", "curl", "wget", "nc", "netcat")
| project TimeGenerated, DeviceName, InitiatingProcessFileName, FileName, ProcessCommandLine, AccountName
| order by TimeGenerated desc

// Network connections from GPUStack processes to suspicious destinations
DeviceNetworkEvents
| where TimeGenerated > ago(7d)
| where InitiatingProcessFileName contains "gpustack" or InitiatingProcessCommandLine contains "gpustack"
| where RemoteIPType == "Public" and RemotePort != 443 and RemotePort != 80
| project TimeGenerated, DeviceName, RemoteIP, RemotePort, InitiatingProcessFileName
| order by TimeGenerated desc

-- Hunt for GPUStack processes with suspicious command lines or child processes
SELECT 
    Pid,
    Ppid,
    Name,
    Exe,
    CommandLine,
    Username,
    CreateTime,
    parent().Name as ParentName,
    parent().CommandLine as ParentCommandLine
FROM pslist()
WHERE 
    (Name =~ "gpustack" OR Exe =~ "gpustack" OR CommandLine =~ "gpustack")
    OR 
    (ParentName =~ "gpustack" AND (
        Name =~ "bash|sh|python|curl|wget|nc|perl|ruby"
        OR CommandLine =~ "base64|eval|exec|download|http://|https://"
    ))

-- Check for network connections from GPUStack processes
SELECT 
    Pid,
    Name,
    netstat().LocalAddr as LocalIP,
    netstat().LocalPort as LocalPort,
    netstat().RemoteAddr as RemoteIP,
    netstat().RemotePort as RemotePort,
    netstat().State as ConnectionState
FROM pslist()
WHERE Name =~ "gpustack" OR Exe =~ "gpustack"

#!/bin/bash
# CVE-2026-102895 GPUStack Emergency Mitigation Script
# Run with root privileges on GPUStack management nodes

set -e

RED='\033[0;31m'
GREEN='\033[0;32m'
YELLOW='\033[1;33m'
NC='\033[0m' # No Color

echo -e "${YELLOW}[*] CVE-2026-102895 GPUStack Security Assessment${NC}"
echo "=================================================="

# Check if GPUStack is installed
if ! command -v gpustack &> /dev/null && [ ! -d "/opt/gpustack" ] && [ ! -d "/usr/local/gpustack" ]; then
    echo -e "${GREEN}[+] GPUStack not found on this system. No action required.${NC}"
    exit 0
fi

echo -e "${YELLOW}[!] GPUStack installation detected. Beginning security checks...${NC}"

# 1. Immediate service isolation (if patching is delayed)
echo -e "${YELLOW}[*] Checking network exposure...${NC}"
GPUSTACK_PORTS=$(netstat -tlnp 2>/dev/null | grep -E ':(80|443|8080|5000)' | grep -E 'gpustack|python' || true)

if [ ! -z "$GPUSTACK_PORTS" ]; then
    echo -e "${RED}[!] GPUStack appears to be listening on network interfaces:${NC}"
    echo "$GPUSTACK_PORTS"
    
    read -p "Do you want to immediately restrict GPUStack to localhost only? (y/n) " -n 1 -r
    echo
    if [[ $REPLY =~ ^[Yy]$ ]]; then
        # Backup config
        cp /etc/gpustack/config.yaml /etc/gpustack/config.yaml.bak.$(date +%Y%m%d_%H%M%S) 2>/dev/null || true
        
        # Update config to bind to localhost (adjust based on actual config location)
        if [ -f "/etc/gpustack/config.yaml" ]; then
            sed -i 's/host: 0.0.0.0/host: 127.0.0.1/' /etc/gpustack/config.yaml
            echo -e "${GREEN}[+] Updated GPUStack to listen on localhost only${NC}"
            systemctl restart gpustack 2>/dev/null || echo "Please restart GPUStack service manually"
        fi
    fi
fi

# 2. Check for suspicious API keys
echo -e "${YELLOW}[*] Checking for suspicious API keys...${NC}"
if [ -f "/var/lib/gpustack/data.db" ] || [ -f "/opt/gpustack/data/gpustack.db" ]; then
    # This assumes SQLite backend - adjust for your deployment
    echo -e "${YELLOW}[!] Review API keys manually. Check for keys created after $(date -d '7 days ago' +%Y-%m-%d):${NC}"
    # sqlite3 /path/to/db "SELECT * FROM api_keys WHERE created_at > date('now', '-7 days');" 2>/dev/null || echo "Manual DB inspection required"
fi

# 3. Check for unauthorized inference backends
echo -e "${YELLOW}[*] Checking for unauthorized inference backend configurations...${NC}"
find /etc/gpustack /opt/gpustack /var/lib/gpustack -name "*.yaml" -o -name "*.yml" 2>/dev/null | while read yaml; do
    if grep -q "inference-backends" "$yaml" 2>/dev/null; then
        echo -e "${YELLOW}[!] Found inference backend config: $yaml${NC}"
        echo "    Last modified: $(stat -c %y "$yaml" 2>/dev/null || stat -f %Sm "$yaml" 2>/dev/null)"
    fi
done

# 4. Check for suspicious processes
echo -e "${YELLOW}[*] Checking for suspicious child processes...${NC}"
ps auxf | grep -E "(gpustack|python).*\-\>.*(bash|sh|curl|wget|nc)" | grep -v grep || echo "No suspicious process trees detected"

# 5. Version check and update instructions
echo -e "${YELLOW}[*] Version Assessment${NC}"
if command -v gpustack &> /dev/null; then
    VERSION=$(gpustack version 2>/dev/null || gpustack --version 2>/dev/null || echo "Unknown")
    echo "Current GPUStack version: $VERSION"
    
    # Check if vulnerable (assume all versions prior to vendor patch are vulnerable)
    echo -e "${RED}[!] If your version is not the latest security release, you are vulnerable.${NC}"
    echo -e "${YELLOW}[!] Please update immediately using:${NC}"
    echo "    # For pip installations:"
    echo "    pip install --upgrade gpustack"
    echo "    # For Docker deployments:"
    echo "    docker pull gpustack/gpustack:latest"
    echo "    # For systemd services:"
    echo "    systemctl stop gpustack && curl -sfL https://get.gpustack.ai | sh -"
fi

# 6. Credential rotation reminder
echo -e "${YELLOW}[*] CRITICAL: Credential Rotation Required${NC}"
echo "If this system was exposed to the internet, you MUST rotate:"
echo "  - All GPUStack API keys"
echo "  - Cloud provider credentials (AWS, Azure, GCP) stored in GPUStack"
echo "  - Any database credentials used by GPUStack"
echo "  - SSH keys or service account tokens accessible to the GPUStack service account"

echo -e "${GREEN}[+] Assessment complete. Review findings above and apply patches immediately.${NC}"