CISA puts GPUStack on the KEV catalog: an unauthenticated attacker takes over an AI GPU cluster

On November 9, 2026, CISA added four actively exploited flaws to its KEV catalog, including a CVSS 9.8 authentication flaw in GPUStack that hands administration of a GPU cluster to an unauthenticated attacker. Teams running this manager should move to 2.3.0 and then revoke every exposed secret, because the patch does not invalidate keys already stolen.