Skip to content
OpenAdvisories

Package · crates.io

rustfs

13 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.1
    CVE-2026-27822

    Rust has Critical Stored XSS in Preview Modal, leading to Administrative Account Takeover

    RustFS is a distributed object storage system built in Rust. Prior to version 1.0.0-alpha.83, a Stored Cross-Site Scripting (XSS) vulnerability in the RustFS Console allows an attacker to execute arbitrary JavaScript in the context of the management console. …

    rustfs rustfs rustfs crates.io
  • Critical 9.8
    CVE-2025-68926 Public exploit EPSS 32%

    RustFS has a gRPC Hardcoded Token Authentication Bypass

    RustFS is a distributed object storage system built in Rust. In versions prior to 1.0.0-alpha.78, RustFS implements gRPC authentication using a hardcoded static token `"rustfs rpc"` that is publicly exposed in the source code repository, hardcoded on both cli…

    rustfs rustfs rustfs crates.io