GPUStack 2.1.1: one header = full admin, no login
GPUStack 2.1.1: one header = full admin, no login One HTTP header turned a remote, unauthenticated request into full admin on GPUStack 2.1.1. CISA added it to the Known Exploited Vulnerabilities catalog on November 9, 2026, with a November 12 patch deadline for federal agencies — after attackers us…
Read the full story at DEV Community — AI ↗
Timeline · 1 report
- 2026-11-10 15:54 · DEV Community — AI
GPUStack 2.1.1: one header = full admin, no login