Security
فارسی
All products

rustfs

Rust / Cargo · Package
13 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
RustFS: ListServiceAccount authorizes against wrong admin action, enabling cross-user enumeration and root service account takeoverGHSA-MM2Q-QCMX-GW4W rustfs Rust / Cargo High Fix reported
RustFS: Missing admin authorization on notification target endpoints allows unauthenticated configuration of event webhooksCVE-2026-40937 · GHSA-PFCQ-4GJR-6GJM rustfs Rust / Cargo High No fix reported
RustFS has an authorization bypass in multipart UploadPartCopy enables cross-bucket object exfiltrationCVE-2026-39360 · GHSA-MX42-J6WV-PX98 rustfs Rust / Cargo Medium No fix reported
Rust has Critical Stored XSS in Preview Modal, leading to Administrative Account TakeoverCVE-2026-27822 · GHSA-V9FG-3CR2-277J rustfs Rust / Cargo Critical Fix reported
RustFS: Missing Post Policy Validation leads to Arbitrary Object WriteCVE-2026-27607 · GHSA-W5FH-F8XH-5X3P rustfs Rust / Cargo High Fix reported
RustFS Logs Sensitive Credentials in PlaintextCVE-2026-24762 · GHSA-R54G-49RX-98CR rustfs Rust / Cargo Medium Fix reported
RustFS has SourceIp bypass via spoofed X-Forwarded-For/Real-IP headersCVE-2026-21862 · GHSA-FC6G-2GCP-2QRQ rustfs Rust / Cargo High Fix reported
RustFS's RPC signature verification logs shared secretCVE-2026-22782 · GHSA-333V-68XH-8MMQ rustfs Rust / Cargo Low Fix reported
RustFS has a gRPC Hardcoded Token Authentication BypassCVE-2025-68926 · GHSA-H956-RH7X-PPGJ rustfs Rust / Cargo Critical Fix reported
RustFS Path Traversal VulnerabilityCVE-2025-68705 · GHSA-PQ29-69JG-9MXC rustfs Rust / Cargo High Fix reported
RustFS gRPC GetMetrics deserialization panic enables remote DoSCVE-2025-69255 · GHSA-GW2X-Q739-QHCR rustfs Rust / Cargo Medium Fix reported
RustFS has IAM deny_only Short-Circuit that Allows Privilege Escalation via Service Account MintingCVE-2026-22043 · GHSA-XGR5-QC6W-VCG9 rustfs Rust / Cargo Medium Fix reported
RustFS has IAM Incorrect Authorization in ImportIam that Allows Privilege EscalationCVE-2026-22042 · GHSA-VCWH-PFF9-64CC rustfs Rust / Cargo Medium Fix reported