Lucene search
+L

328 matches found

NVD
NVD
•added 2025/12/30 5:15 p.m.•15 views

CVE-2025-68926

RustFS is a distributed object storage system built in Rust. In versions prior to 1.0.0-alpha.78, RustFS implements gRPC authentication using a hardcoded static token "rustfs rpc" that is publicly exposed in the source code repository, hardcoded on both client and server sides, non-configurable...

9.8CVSS0.3185EPSS
SaveExploits3References1
CVE
CVE
•added 2025/12/30 4:59 p.m.•56 views

CVE-2025-68926

CVE-2025-68926 – RustFS hardcoded gRPC token authentication bypass . Affected RustFS versions prior to 1.0.0-alpha.78 expose a publicly visible hardcoded token, “rustfs rpc”, used for gRPC authentication on both client and server. The token is non-configurable and identical across deployments, en...

9.8CVSS6.7AI score0.3185EPSS
SaveExploits3References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/12/30 4:59 p.m.•6 views

CVE-2025-68926 RustFS has a gRPC Hardcoded Token Authentication Bypass

RustFS is a distributed object storage system built in Rust. In versions prior to 1.0.0-alpha.78, RustFS implements gRPC authentication using a hardcoded static token "rustfs rpc" that is publicly exposed in the source code repository, hardcoded on both client and server sides, non-configurable...

9.8CVSS6.7AI score0.3185EPSS
SaveExploits3References1
OSV
OSV
•added 2025/12/30 4:59 p.m.•18 views

CVE-2025-68926 RustFS has a gRPC Hardcoded Token Authentication Bypass

RustFS is a distributed object storage system built in Rust. In versions prior to 1.0.0-alpha.78, RustFS implements gRPC authentication using a hardcoded static token "rustfs rpc" that is publicly exposed in the source code repository, hardcoded on both client and server sides, non-configurable...

9.8CVSS7AI score
SaveExploits0References3
Cvelist
Cvelist
•added 2025/12/30 4:59 p.m.•45 views

CVE-2025-68926 RustFS has a gRPC Hardcoded Token Authentication Bypass

RustFS is a distributed object storage system built in Rust. In versions prior to 1.0.0-alpha.78, RustFS implements gRPC authentication using a hardcoded static token "rustfs rpc" that is publicly exposed in the source code repository, hardcoded on both client and server sides, non-configurable...

9.8CVSS0.3185EPSS
SaveExploits3References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/30 12:00 a.m.•2 views

CVE-2025-68926: Use of Hard-coded Credentials

RustFS is a distributed object storage system built in Rust. In versions prior to 1.0.0-alpha.78, RustFS implements gRPC authentication using a hardcoded static token "rustfs rpc" that is publicly exposed in the source code repository, hardcoded on both client and server sides, non-configurable...

9.8CVSS8.1AI score0.3185EPSS
SaveExploits3References1
CNNVD
CNNVD
•added 2025/12/30 12:00 a.m.•13 views

rustfs 信任管理问题漏洞

rustfs is a high performance object storage system from the RustFS open source. A trust management issue vulnerability exists in versions prior to rustfs 1.0.0-alpha.77, which stems from the use of hard-coded static tokens for gRPC authentication, and could lead to privileged operations such as...

9.8CVSS5.8AI score0.3185EPSS
SaveExploits3References2
Positive Technologies
Positive Technologies
•added 2025/12/30 12:00 a.m.•8 views

PT-2025-54203

Name of the Vulnerable Software and Affected Versions RustFS versions prior to 1.0.0-alpha.77 Description RustFS, a distributed object storage system built in Rust, uses a hardcoded static token, "rustfs rpc", for gRPC authentication in versions prior to 1.0.0-alpha.77. This token is publicly...

10CVSS5.6AI score0.3185EPSS
SaveExploits3References27
Rows per page
Query Builder