Skip to content
OpenAdvisories

Package · Go

github.com/seaweedfs/seaweedfs

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.3
    CVE-2026-73080

    SeaweedFS: Unauthenticated SSRF with response read-back via VolumeServer.FetchAndWriteNeedle

    SeaweedFS is a distributed storage system. Prior to 4.24, VolumeServer.FetchAndWriteNeedle in weed/server/volume_grpc_remote.go fetches a caller-supplied remote endpoint through weed/remote_storage/s3/s3_storage_client.go and writes the response into a needle…

    seaweedfs seaweedfs github.com/seaweedfs/seaweedfs Go
  • Critical 9.8
    CVE-2026-72920

    SeaweedFS: Unauthenticated filer IAM gRPC service grants S3 administrative control

    SeaweedFS is a distributed storage system. Prior to 4.24, the filer registers the SeaweedIdentityAccessManagement gRPC service without mandatory authentication when jwt.filer_signing.key is unset, allowing any client that can reach the filer gRPC port to invo…

    seaweedfs seaweedfs github.com/seaweedfs/seaweedfs Go