CVE-2026-24762 RustFS Logs Sensitive Credentials in Plaintext

RustFS is a distributed object storage system built in Rust. From versions alpha.13 to alpha.81, RustFS logs sensitive credential material access key, secret key, session token to application logs at INFO level. This results in credentials being recorded in plaintext in log output, which may be...

CVE-2026-24762

CVE-2026-24762 affects RustFS up to alpha.81, where the server logs sensitive credential material (access key, secret key, session token) at INFO level, causing plaintext credentials in logs accessible to log consumers and potentially leading to credential compromise. Root cause: logging ofSTS cr...