Skip to content
OpenAdvisories

Vendor

Alluxio

1 known vulnerabilities.

Products

alluxio 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-79787

    Alluxio through 2.9.5 S3 REST Proxy Authentication Bypass via Unverified Request Signature

    Alluxio's S3 REST proxy fails to verify AWS Signature Version 4 signatures in its default configuration, allowing unauthenticated attackers to spoof user identity. Attackers can extract usernames from unsigned Authorization headers and impersonate any user, i…

    Alluxio alluxio