GPUStack gave admin to anything that looked like localhost. behind a same-host proxy, everything does (CVE-2026-102895, on KEV)
GPUStack before 2.2.0 promoted loopback requests to admin by default, and a same-host reverse proxy makes every request loopback. The vendor reports in-the-wild use. CISA added it to KEV on November 9.