Skip to content
OpenAdvisories

Package · PyPI

rucio

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2026-58273

    Rucio: Authorisation Bypass on REST API endpoint for signing URLs

    Rucio is a scientific data management framework. From 1.16.1 until 35.9.0, 38.6.0, and 41.0.0rc1, the /credentials/signurl endpoint reads X-Rucio-Account instead of the account stored in request.environ['issuer'] by token authentication. Any authenticated low…

    rucio rucio rucio PyPI