RU
Product
rustfs
32
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 15Medium 11Low 0
Watch
Add rustfs to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-45039 | 9.8 | May 28 | RustFS: Internode RPC HMAC secret falls back to public default credential, enabling peer impersonation Affected: < 1.0.0-beta.2 |
| CVE-2026-22043 | 9.8 | Jan 8 | RustFS has IAM deny_only Short-Circuit that Allows Privilege Escalation via Service Account Minting Affected: >= 1.0.0-alpha.13, < 1.0.0-alpha.79 |
| CVE-2025-68705 | 9.8 | Jan 7 | RustFS Path Traversal Vulnerability Affected: >= 1.0.0-alpha.13, < 1.0.0-alpha.79 |
| CVE-2025-68926 | 9.8 | Dec 30 | RustFS has a gRPC Hardcoded Token Authentication Bypass Affected: < 1.0.0-alpha.78 |
| CVE-2026-45043 | 9.3 | May 29 | RustFS: ImportIam Allows Creation of Backdoor Service Accounts Under Any Parent Including Root Affected: < 1.0.0-beta.2 |
| CVE-2026-27607 | 9.1 | Feb 25 | RustFS's Missing Post Policy Validation leads to Arbitrary Object Write Affected: >= 1.0.0-alpha.56, < 1.0.0-alpha.83 |
Showing 6