7.7

CVE-2026-21862

RustFS is a distributed object storage system built in Rust. Prior to version alpha.78, IP-based access control can be bypassed: get_condition_values trusts client-supplied X-Forwarded-For/X-Real-Ip without verifying a trusted proxy, so any reachable client can spoof aws:SourceIp and satisfy IP-allowlist policies. This issue has been patched in version alpha.78.
Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Rustfs ≫ Rustfs Version1.0.0 Updatealpha1 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha10 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha11 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha12 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha13 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha14 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha15 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha16 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha17 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha18 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha19 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha2 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha20 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha21 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha22 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha23 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha24 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha25 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha26 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha27 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha28 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha29 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha3 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha30 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha31 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha32 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha33 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha34 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha35 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha36 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha37 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha38 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha39 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha4 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha40 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha41 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha42 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha43 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha44 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha45 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha46 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha47 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha48 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha49 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha5 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha50 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha51 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha52 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha53 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha54 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha55 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha56 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha57 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha58 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha59 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha6 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha60 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha61 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha62 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha63 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha64 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha65 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha66 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha67 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha68 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha69 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha7 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha70 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha71 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha72 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha73 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha74 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha75 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha76 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha77 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha8 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha9 SwPlatformrust
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.04% 0.116
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
security-advisories@github.com 7.7 0 0
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CWE-290 Authentication Bypass by Spoofing

This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.