8.8

CVE-2026-22042

Exploit
RustFS is a distributed object storage system built in Rust. Prior to version 1.0.0-alpha.79, he `ImportIam` admin API validates permissions using `ExportIAMAction` instead of `ImportIAMAction`, allowing a principal with export-only IAM permissions to perform import operations. Since importing IAM data performs privileged write actions (creating/updating users, groups, policies, and service accounts), this can lead to unauthorized IAM modification and privilege escalation. Version 1.0.0-alpha.79 fixes the issue.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Rustfs ≫ Rustfs Version1.0.0 Updatealpha1 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha10 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha11 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha12 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha13 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha14 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha15 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha16 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha17 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha18 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha19 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha2 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha20 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha21 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha22 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha23 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha24 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha25 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha26 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha27 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha28 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha29 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha3 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha30 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha31 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha32 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha33 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha34 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha35 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha36 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha37 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha38 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha39 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha4 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha40 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha41 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha42 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha43 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha44 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha45 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha46 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha47 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha48 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha49 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha5 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha50 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha51 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha52 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha53 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha54 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha55 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha56 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha57 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha58 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha59 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha6 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha60 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha61 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha62 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha63 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha64 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha65 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha66 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha67 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha68 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha69 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha7 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha70 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha71 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha72 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha73 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha74 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha75 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha76 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha77 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha78 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha8 SwPlatformrust
Rustfs ≫ Rustfs Version1.0.0 Updatealpha9 SwPlatformrust
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.04% 0.131
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 8.8 2.8 5.9
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
security-advisories@github.com 5.7 0 0
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CWE-285 Improper Authorization

The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.

CWE-863 Incorrect Authorization

The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.