Skip to content
OpenAdvisories

Package · crates.io

rustfs

13 known vulnerabilities.

2 results · Clear filters · Feed

  • High 8.1
    CVE-2026-27607 Public exploit

    RustFS's Missing Post Policy Validation leads to Arbitrary Object Write

    RustFS is a distributed object storage system built in Rust. In versions 1.0.0-alpha.56 through 1.0.0-alpha.82, RustFS does not validate policy conditions in presigned POST uploads (PostObject), allowing attackers to bypass content-length-range, starts-with, …

  • High 8.8
    CVE-2025-68705 Public exploit

    RustFS Path Traversal Vulnerability

    RustFS is a distributed object storage system built in Rust. In versions 1.0.0-alpha.13 to 1.0.0-alpha.78, RustFS contains a path traversal vulnerability in the /rustfs/rpc/read_file_stream endpoint. This issue has been patched in version 1.0.0-alpha.79.