CVE-2026-59092

JuiceFS through 1.3.1, fixed in commit a46979c, contains an authentication bypass vulnerability that allows unauthenticated remote attackers to access sensitive debug and metrics endpoints by exploiting improper handler registration on the shared http.DefaultServeMux. Attackers can request the...

CVE-2026-59092 JuiceFS - Authentication Bypass via pprof and metrics Endpoints

JuiceFS through 1.3.1, fixed in commit a46979c, contains an authentication bypass vulnerability that allows unauthenticated remote attackers to access sensitive debug and metrics endpoints by exploiting improper handler registration on the shared http.DefaultServeMux. Attackers can request the...

CVE-2026-59092

JuiceFS

CVE-2026-59092

JuiceFS through 1.3.1, fixed in commit a46979c, contains an authentication bypass vulnerability that allows unauthenticated remote attackers to access sensitive debug and metrics endpoints by exploiting improper handler registration on the shared http.DefaultServeMux. Attackers can request the...

PT-2026-55293

Name of the Vulnerable Software and Affected Versions JuiceFS versions prior to 1.3.2 Description An authentication bypass exists due to improper handler registration on the shared http.DefaultServeMux. This allows unauthenticated remote attackers to access sensitive debug and metrics endpoints...

GHSA-RFX7-8W68-Q57Q vulnerabilities

Vulnerabilities for packages: juicefs...

CVE-2026-33413 vulnerabilities

Vulnerabilities for packages: juicefs...

GHSA-Q8M4-XHHV-38MG vulnerabilities

Vulnerabilities for packages: juicefs...

CVE-2026-33343 vulnerabilities

Vulnerabilities for packages: juicefs...

GHSA-X35M-3GP4-4FH5 vulnerabilities

Vulnerabilities for packages: juicefs...

GHSA-RFX7-8W68-Q57Q vulnerabilities

Vulnerabilities for packages: juicefs...

CVE-2026-44283 vulnerabilities

Vulnerabilities for packages: juicefs...

GHSA-Q8M4-XHHV-38MG vulnerabilities

Vulnerabilities for packages: juicefs...

CVE-2026-33413 vulnerabilities

Vulnerabilities for packages: juicefs...

CVE-2026-33343 vulnerabilities

Vulnerabilities for packages: juicefs...

CVE-2026-44283 vulnerabilities

Vulnerabilities for packages: juicefs...

GHSA-X35M-3GP4-4FH5 vulnerabilities

Vulnerabilities for packages: juicefs...

GHSA-VP29-5652-4FW9 vulnerabilities

Vulnerabilities for packages: k8sgateway, juicefs, kubernetes-dns-node-cache...

GHSA-QHMP-Q7XH-99RH vulnerabilities

Vulnerabilities for packages: k8sgateway, juicefs, kubernetes-dns-node-cache...

CVE-2026-32936 vulnerabilities

Vulnerabilities for packages: k8sgateway, juicefs, kubernetes-dns-node-cache...