CVE-2026-58273

The Rucio scientific data management framework is vulnerable to an authorization bypass in the /credentials/signurl endpoint. The application incorrectly trusts the client-supplied X-Rucio-Account HTTP header instead of the account identity verified by the authentication token. Consequently, any ...