Skip to content
OpenAdvisories

Vendor

rustfs

33 known vulnerabilities.

Products

rustfs 32 console 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.1
    CVE-2026-27607 Public exploit

    RustFS's Missing Post Policy Validation leads to Arbitrary Object Write

    RustFS is a distributed object storage system built in Rust. In versions 1.0.0-alpha.56 through 1.0.0-alpha.82, RustFS does not validate policy conditions in presigned POST uploads (PostObject), allowing attackers to bypass content-length-range, starts-with, …

    rustfs rustfs rustfs crates.io
  • High 8.8
    CVE-2025-68705 Public exploit

    RustFS Path Traversal Vulnerability

    RustFS is a distributed object storage system built in Rust. In versions 1.0.0-alpha.13 to 1.0.0-alpha.78, RustFS contains a path traversal vulnerability in the /rustfs/rpc/read_file_stream endpoint. This issue has been patched in version 1.0.0-alpha.79.

    rustfs rustfs rustfs crates.io
  • Critical 9.8
    CVE-2025-68926 Public exploit EPSS 32%

    RustFS has a gRPC Hardcoded Token Authentication Bypass

    RustFS is a distributed object storage system built in Rust. In versions prior to 1.0.0-alpha.78, RustFS implements gRPC authentication using a hardcoded static token `"rustfs rpc"` that is publicly exposed in the source code repository, hardcoded on both cli…

    rustfs rustfs rustfs crates.io