1437 matches found
CVE-2026-73080 SeaweedFS: Unauthenticated SSRF with response read-back via VolumeServer.FetchAndWriteNeedle
SeaweedFS is a distributed storage system. Prior to 4.24, VolumeServer.FetchAndWriteNeedle in weed/server/volumegrpcremote.go fetches a caller-supplied remote endpoint through weed/remotestorage/s3/s3storageclient.go and writes the response into a needle. The RPC performs no authentication and no...
CVE-2026-72920
SeaweedFS is a distributed storage system. Prior to 4.24, the filer registers the SeaweedIdentityAccessManagement gRPC service without mandatory authentication when jwt.filersigning.key is unset, allowing any client that can reach the filer gRPC port to invoke CreateUser, CreateAccessKey,...
CVE-2026-18636
The Velociraptor gRPC API has a VFSGetBuffer endpoint which allows reading files from the datastore. To prevent users from reading sensitive files or accessing other orgs, the requested path is prefix checked against a list of denied prefixes. This prefix check can be bypassed allowing a user to...
EUVD-2026-56178
The Velociraptor gRPC API has a VFSGetBuffer endpoint which allows reading files from the datastore. To prevent users from reading sensitive files or accessing other orgs, the requested path is prefix checked against a list of denied prefixes. This prefix check can be bypassed allowing a user to...
CVE-2026-18636 Velociraptor VFSGetBuffer API path deny list bypass
The Velociraptor gRPC API has a VFSGetBuffer endpoint which allows reading files from the datastore. To prevent users from reading sensitive files or accessing other orgs, the requested path is prefix checked against a list of denied prefixes. This prefix check can be bypassed allowing a user to...
CVE-2026-18636 Velociraptor VFSGetBuffer API path deny list bypass
The Velociraptor gRPC API has a VFSGetBuffer endpoint which allows reading files from the datastore. To prevent users from reading sensitive files or accessing other orgs, the requested path is prefix checked against a list of denied prefixes. This prefix check can be bypassed allowing a user to...
CVE-2026-18636
The CVE affects Velociraptor’s gRPC API (VFSGetBuffer) where a path-prefix denial check can be bypassed, enabling a user with ROOT read permission to access files in other orgs. The CVSS metrics indicate a NETWORK exploit with LOW complexity and HIGH confidentiality impact, requiring HIGH privile...
CVE-2026-72920 SeaweedFS: Unauthenticated filer IAM gRPC service grants S3 administrative control
SeaweedFS is a distributed storage system. Prior to 4.24, the filer registers the SeaweedIdentityAccessManagement gRPC service without mandatory authentication when jwt.filersigning.key is unset, allowing any client that can reach the filer gRPC port to invoke CreateUser, CreateAccessKey,...
CVE-2026-72920
CVE-2026-72920 affects SeaweedFS before version 4.24. The SeaweedIdentityAccessManagement gRPC service is registered without mandatory authentication when jwt.filer_signing.key is unset, allowing any client able to reach the filer’s gRPC port to invoke CreateUser, CreateAccessKey, PutPolicy, and ...
CVE-2026-72920 SeaweedFS: Unauthenticated filer IAM gRPC service grants S3 administrative control
SeaweedFS is a distributed storage system. Prior to 4.24, the filer registers the SeaweedIdentityAccessManagement gRPC service without mandatory authentication when jwt.filersigning.key is unset, allowing any client that can reach the filer gRPC port to invoke CreateUser, CreateAccessKey,...
EUVD-2026-56156
SeaweedFS is a distributed storage system. Prior to 4.24, the filer registers the SeaweedIdentityAccessManagement gRPC service without mandatory authentication when jwt.filersigning.key is unset, allowing any client that can reach the filer gRPC port to invoke CreateUser, CreateAccessKey,...
CVE-2026-72920 SeaweedFS: Unauthenticated filer IAM gRPC service grants S3 administrative control
SeaweedFS is a distributed storage system. Prior to 4.24, the filer registers the SeaweedIdentityAccessManagement gRPC service without mandatory authentication when jwt.filersigning.key is unset, allowing any client that can reach the filer gRPC port to invoke CreateUser, CreateAccessKey,...
CVE-2026-18972
An authenticated attacker can spoof another GUI user's identity by sending their request with the custom header "Grpc-Metadata-USER". This can lead to an account takeover attack from a user with low privileges to administrator...
CVE-2026-18972
An authenticated attacker can spoof another GUI user's identity by sending their request with the custom header "Grpc-Metadata-USER". This can lead to an account takeover attack from a user with low privileges to administrator...
EUVD-2026-56127
An authenticated attacker can spoof another GUI user's identity by sending their request with the custom header "Grpc-Metadata-USER". This can lead to an account takeover attack from a user with low privileges to administrator...
PT-2026-70217
Name of the Vulnerable Software and Affected Versions Velociraptor affected versions not specified Description The gRPC API contains a flaw in the 'VFSGetBuffer' endpoint used for reading files from the datastore. The system employs a prefix check against a list of denied prefixes to prevent...
PT-2026-70179
An authenticated attacker can spoof another GUI user's identity by sending their request with the custom header "Grpc-Metadata-USER". This can lead to an account takeover attack from a user with low privileges to administrator...
PT-2026-70270
Name of the Vulnerable Software and Affected Versions SeaweedFS versions prior to 4.24 Description An issue exists in the VolumeServer.FetchAndWriteNeedle function within weed/server/volume grpc remote.go that fetches a remote endpoint provided by the caller via weed/remote storage/s3/s3 storage...
PT-2026-70220
Name of the Vulnerable Software and Affected Versions SeaweedFS versions prior to 4.24 Description The filer registers the SeaweedIdentityAccessManagement gRPC service without requiring authentication when the jwt.filer signing.key is unset. This allows any client with access to the filer gRPC po...
CVE-2026-18618
A flaw was found in ml-metadata. The statically-linked gRPC stack in ml-metadata is outdated, making it vulnerable to known HTTP/2 denial of service DoS issues. An in-cluster attacker, with network access to the MLMD pod, could exploit these vulnerabilities by sending specially crafted HTTP/2...