Skip to content
OpenAdvisories

Vendor

rucio

10 known vulnerabilities.

Products

rucio 9 helm-charts 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.0
    CVE-2026-29090

    Rucio SQL injection in postgres_meta DID search path compromises PostgreSQL metadata database

    ### Summary A SQL injection vulnerability exists in Rucio versions 1.30.0 and later before 35.8.5, 38.5.5, 39.4.2, and 40.1.1, in `FilterEngine.create_postgres_query()`. This allows any authenticated Rucio user to execute arbitrary SQL against the PostgreSQL …

    rucio rucio rucio PyPI
  • Critical 9.4
    CVE-2026-29080

    Rucio SQL Injection in FilterEngine Oracle JSON Path via DID Search API

    A SQL injection vulnerability in `FilterEngine.create_sqla_query()` allows any authenticated Rucio user to execute arbitrary SQL against the backend database through the DID search endpoint (`GET /dids/<scope>/dids/search`). On Oracle deployments attacker-con…

    rucio rucio rucio PyPI