{ "document": { "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this portal to enhance access to its information and vulnerabilities. The use of this information is subject to the following terms and conditions:\n\nThe vulnerabilities disclosed in this portal are gathered by NCSC-NL from a variety of open sources, which the user can retrieve from other platforms. NCSC-NL makes every reasonable effort to ensure that the content of this portal is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or real-time keeping up-to-date. NCSC-NL does not control nor guarantee the accuracy, relevance, timeliness or completeness of information obtained from these external sources. The vulnerabilities disclosed in this portal are intended solely for the convenience of professional parties to take appropriate measures to manage the risks posed to the cybersecurity. No rights can be derived from the information provided therein.\n\nNCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of the vulnerabilities disclosed in this portal. This includes damage resulting from the inaccuracy of incompleteness of the information contained in it.\nThe information on this page is subject to Dutch law. All disputes related to or arising from the use of this portal regarding the disclosure of vulnerabilities will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings." } ], "publisher": { "category": "coordinator", "contact_details": "cert@ncsc.nl", "name": "National Cyber Security Centre", "namespace": "https://www.ncsc.nl/" }, "title": "CVE-2026-27822", "tracking": { "current_release_date": "2026-03-27T20:14:37.691235Z", "generator": { "date": "2026-02-17T15:00:00Z", "engine": { "name": "V.E.L.M.A", "version": "1.7" } }, "id": "CVE-2026-27822", "initial_release_date": "2026-02-25T03:25:24.321776Z", "revision_history": [ { "date": "2026-02-25T03:25:24.321776Z", "number": "1", "summary": "CVE created.| Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| References created (1).| CWES updated (1)." }, { "date": "2026-02-25T03:25:30.771022Z", "number": "2", "summary": "NCSC Score created." }, { "date": "2026-02-25T03:38:54.507058Z", "number": "3", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products created (1).| References created (1).| CWES updated (1)." }, { "date": "2026-02-25T03:38:57.478298Z", "number": "4", "summary": "NCSC Score updated." }, { "date": "2026-02-25T07:34:47.524278Z", "number": "5", "summary": "NCSC Score updated." }, { "date": "2026-02-25T15:13:37.806846Z", "number": "6", "summary": "Source created.| CVE status created. (valid)| EPSS created." }, { "date": "2026-02-25T16:29:23.381142Z", "number": "7", "summary": "Products connected (82).| Product Identifiers created (82).| Exploits created (1)." }, { "date": "2026-02-25T16:29:30.204094Z", "number": "8", "summary": "NCSC Score updated." }, { "date": "2026-02-25T20:55:37.907289Z", "number": "9", "summary": "Unknown change." }, { "date": "2026-02-25T23:39:36.608616Z", "number": "10", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| References created (4).| CWES updated (1)." }, { "date": "2026-02-25T23:39:40.553065Z", "number": "11", "summary": "NCSC Score updated." }, { "date": "2026-02-26T00:15:06.369490Z", "number": "12", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (79).| Products created (3).| References created (3).| CWES updated (1)." }, { "date": "2026-03-20T09:39:41.833437Z", "number": "13", "summary": "Source connected.| CVE status created. (valid)| EPSS created." }, { "date": "2026-03-20T09:39:45.258373Z", "number": "14", "summary": "NCSC Score updated." }, { "date": "2026-03-27T19:49:19.916653Z", "number": "15", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (1).| Products created (1).| References created (5).| CWES updated (1)." }, { "date": "2026-03-27T19:49:22.998394Z", "number": "16", "summary": "NCSC Score updated." } ], "status": "interim", "version": "16" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.83", "product": { "name": "vers:unknown/1.0.0-alpha.83", "product_id": "CSAFPID-5944656" } }, { "category": "product_version_range", "name": "vers:unknown/<1.0.0-alpha.83", "product": { "name": "vers:unknown/<1.0.0-alpha.83", "product_id": "CSAFPID-5944658" } } ], "category": "product_name", "name": "cargo/rustfs" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.1", "product": { "name": "vers:unknown/1.0.0-alpha.1", "product_id": "CSAFPID-5314925" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.10", "product": { "name": "vers:unknown/1.0.0-alpha.10", "product_id": "CSAFPID-5314926" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.11", "product": { "name": "vers:unknown/1.0.0-alpha.11", "product_id": "CSAFPID-5314927" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.12", "product": { "name": "vers:unknown/1.0.0-alpha.12", "product_id": "CSAFPID-5314928" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.13", "product": { "name": "vers:unknown/1.0.0-alpha.13", "product_id": "CSAFPID-5314929" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.14", "product": { "name": "vers:unknown/1.0.0-alpha.14", "product_id": "CSAFPID-5314930" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.15", "product": { "name": "vers:unknown/1.0.0-alpha.15", "product_id": "CSAFPID-5314931" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.16", "product": { "name": "vers:unknown/1.0.0-alpha.16", "product_id": "CSAFPID-5314932" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.17", "product": { "name": "vers:unknown/1.0.0-alpha.17", "product_id": "CSAFPID-5314933" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.18", "product": { "name": "vers:unknown/1.0.0-alpha.18", "product_id": "CSAFPID-5314934" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.19", "product": { "name": "vers:unknown/1.0.0-alpha.19", "product_id": "CSAFPID-5314935" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.2", "product": { "name": "vers:unknown/1.0.0-alpha.2", "product_id": "CSAFPID-5314936" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.20", "product": { "name": "vers:unknown/1.0.0-alpha.20", "product_id": "CSAFPID-5314937" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.21", "product": { "name": "vers:unknown/1.0.0-alpha.21", "product_id": "CSAFPID-5314938" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.22", "product": { "name": "vers:unknown/1.0.0-alpha.22", "product_id": "CSAFPID-5314939" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.23", "product": { "name": "vers:unknown/1.0.0-alpha.23", "product_id": "CSAFPID-5314940" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.24", "product": { "name": "vers:unknown/1.0.0-alpha.24", "product_id": "CSAFPID-5314941" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.25", "product": { "name": "vers:unknown/1.0.0-alpha.25", "product_id": "CSAFPID-5314942" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.26", "product": { "name": "vers:unknown/1.0.0-alpha.26", "product_id": "CSAFPID-5314943" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.27", "product": { "name": "vers:unknown/1.0.0-alpha.27", "product_id": "CSAFPID-5314944" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.28", "product": { "name": "vers:unknown/1.0.0-alpha.28", "product_id": "CSAFPID-5314945" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.29", "product": { "name": "vers:unknown/1.0.0-alpha.29", "product_id": "CSAFPID-5314946" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.3", "product": { "name": "vers:unknown/1.0.0-alpha.3", "product_id": "CSAFPID-5314947" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.30", "product": { "name": "vers:unknown/1.0.0-alpha.30", "product_id": "CSAFPID-5314948" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.31", "product": { "name": "vers:unknown/1.0.0-alpha.31", "product_id": "CSAFPID-5314949" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.32", "product": { "name": "vers:unknown/1.0.0-alpha.32", "product_id": "CSAFPID-5314950" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.33", "product": { "name": "vers:unknown/1.0.0-alpha.33", "product_id": "CSAFPID-5314951" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.34", "product": { "name": "vers:unknown/1.0.0-alpha.34", "product_id": "CSAFPID-5314952" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.35", "product": { "name": "vers:unknown/1.0.0-alpha.35", "product_id": "CSAFPID-5314953" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.36", "product": { "name": "vers:unknown/1.0.0-alpha.36", "product_id": "CSAFPID-5314954" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.37", "product": { "name": "vers:unknown/1.0.0-alpha.37", "product_id": "CSAFPID-5314955" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.38", "product": { "name": "vers:unknown/1.0.0-alpha.38", "product_id": "CSAFPID-5314956" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.39", "product": { "name": "vers:unknown/1.0.0-alpha.39", "product_id": "CSAFPID-5314957" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.4", "product": { "name": "vers:unknown/1.0.0-alpha.4", "product_id": "CSAFPID-5314958" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.40", "product": { "name": "vers:unknown/1.0.0-alpha.40", "product_id": "CSAFPID-5314959" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.41", "product": { "name": "vers:unknown/1.0.0-alpha.41", "product_id": "CSAFPID-5314960" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.42", "product": { "name": "vers:unknown/1.0.0-alpha.42", "product_id": "CSAFPID-5314961" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.43", "product": { "name": "vers:unknown/1.0.0-alpha.43", "product_id": "CSAFPID-5314962" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.44", "product": { "name": "vers:unknown/1.0.0-alpha.44", "product_id": "CSAFPID-5314963" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.45", "product": { "name": "vers:unknown/1.0.0-alpha.45", "product_id": "CSAFPID-5314964" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.46", "product": { "name": "vers:unknown/1.0.0-alpha.46", "product_id": "CSAFPID-5314965" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.47", "product": { "name": "vers:unknown/1.0.0-alpha.47", "product_id": "CSAFPID-5314966" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.48", "product": { "name": "vers:unknown/1.0.0-alpha.48", "product_id": "CSAFPID-5314967" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.49", "product": { "name": "vers:unknown/1.0.0-alpha.49", "product_id": "CSAFPID-5314968" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.5", "product": { "name": "vers:unknown/1.0.0-alpha.5", "product_id": "CSAFPID-5314969" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.50", "product": { "name": "vers:unknown/1.0.0-alpha.50", "product_id": "CSAFPID-5314970" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.51", "product": { "name": "vers:unknown/1.0.0-alpha.51", "product_id": "CSAFPID-5314971" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.52", "product": { "name": "vers:unknown/1.0.0-alpha.52", "product_id": "CSAFPID-5314972" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.53", "product": { "name": "vers:unknown/1.0.0-alpha.53", "product_id": "CSAFPID-5314973" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.54", "product": { "name": "vers:unknown/1.0.0-alpha.54", "product_id": "CSAFPID-5314974" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.55", "product": { "name": "vers:unknown/1.0.0-alpha.55", "product_id": "CSAFPID-5314975" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.56", "product": { "name": "vers:unknown/1.0.0-alpha.56", "product_id": "CSAFPID-5314976" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.57", "product": { "name": "vers:unknown/1.0.0-alpha.57", "product_id": "CSAFPID-5314977" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.58", "product": { "name": "vers:unknown/1.0.0-alpha.58", "product_id": "CSAFPID-5314978" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.59", "product": { "name": "vers:unknown/1.0.0-alpha.59", "product_id": "CSAFPID-5314979" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.6", "product": { "name": "vers:unknown/1.0.0-alpha.6", "product_id": "CSAFPID-5314980" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.60", "product": { "name": "vers:unknown/1.0.0-alpha.60", "product_id": "CSAFPID-5314981" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.61", "product": { "name": "vers:unknown/1.0.0-alpha.61", "product_id": "CSAFPID-5314982" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.62", "product": { "name": "vers:unknown/1.0.0-alpha.62", "product_id": "CSAFPID-5314983" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.63", "product": { "name": "vers:unknown/1.0.0-alpha.63", "product_id": "CSAFPID-5314984" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.64", "product": { "name": "vers:unknown/1.0.0-alpha.64", "product_id": "CSAFPID-5314985" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.65", "product": { "name": "vers:unknown/1.0.0-alpha.65", "product_id": "CSAFPID-5314986" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.66", "product": { "name": "vers:unknown/1.0.0-alpha.66", "product_id": "CSAFPID-5314987" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.67", "product": { "name": "vers:unknown/1.0.0-alpha.67", "product_id": "CSAFPID-5314988" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.68", "product": { "name": "vers:unknown/1.0.0-alpha.68", "product_id": "CSAFPID-5314989" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.69", "product": { "name": "vers:unknown/1.0.0-alpha.69", "product_id": "CSAFPID-5314990" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.7", "product": { "name": "vers:unknown/1.0.0-alpha.7", "product_id": "CSAFPID-5314991" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.70", "product": { "name": "vers:unknown/1.0.0-alpha.70", "product_id": "CSAFPID-5314992" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.71", "product": { "name": "vers:unknown/1.0.0-alpha.71", "product_id": "CSAFPID-5314993" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.72", "product": { "name": "vers:unknown/1.0.0-alpha.72", "product_id": "CSAFPID-5314994" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.73", "product": { "name": "vers:unknown/1.0.0-alpha.73", "product_id": "CSAFPID-5314995" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.74", "product": { "name": "vers:unknown/1.0.0-alpha.74", "product_id": "CSAFPID-5314996" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.75", "product": { "name": "vers:unknown/1.0.0-alpha.75", "product_id": "CSAFPID-5314997" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.76", "product": { "name": "vers:unknown/1.0.0-alpha.76", "product_id": "CSAFPID-5314998" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.77", "product": { "name": "vers:unknown/1.0.0-alpha.77", "product_id": "CSAFPID-5335924" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.78", "product": { "name": "vers:unknown/1.0.0-alpha.78", "product_id": "CSAFPID-5347856" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.79", "product": { "name": "vers:unknown/1.0.0-alpha.79", "product_id": "CSAFPID-5440712" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.8", "product": { "name": "vers:unknown/1.0.0-alpha.8", "product_id": "CSAFPID-5314999" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.80", "product": { "name": "vers:unknown/1.0.0-alpha.80", "product_id": "CSAFPID-5713781" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.81", "product": { "name": "vers:unknown/1.0.0-alpha.81", "product_id": "CSAFPID-5713782" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.82", "product": { "name": "vers:unknown/1.0.0-alpha.82", "product_id": "CSAFPID-5713783" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha.9", "product": { "name": "vers:unknown/1.0.0-alpha.9", "product_id": "CSAFPID-5315000" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha1", "product": { "name": "vers:unknown/1.0.0-alpha1", "product_id": "CSAFPID-5435657", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha1:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha10", "product": { "name": "vers:unknown/1.0.0-alpha10", "product_id": "CSAFPID-5435658", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha10:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha11", "product": { "name": "vers:unknown/1.0.0-alpha11", "product_id": "CSAFPID-5435659", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha11:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha12", "product": { "name": "vers:unknown/1.0.0-alpha12", "product_id": "CSAFPID-5435660", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha12:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha13", "product": { "name": "vers:unknown/1.0.0-alpha13", "product_id": "CSAFPID-5435661", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha13:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha14", "product": { "name": "vers:unknown/1.0.0-alpha14", "product_id": "CSAFPID-5435662", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha14:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha15", "product": { "name": "vers:unknown/1.0.0-alpha15", "product_id": "CSAFPID-5435663", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha15:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha16", "product": { "name": "vers:unknown/1.0.0-alpha16", "product_id": "CSAFPID-5435664", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha16:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha17", "product": { "name": "vers:unknown/1.0.0-alpha17", "product_id": "CSAFPID-5435665", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha17:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha18", "product": { "name": "vers:unknown/1.0.0-alpha18", "product_id": "CSAFPID-5435666", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha18:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha19", "product": { "name": "vers:unknown/1.0.0-alpha19", "product_id": "CSAFPID-5435667", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha19:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha2", "product": { "name": "vers:unknown/1.0.0-alpha2", "product_id": "CSAFPID-5435668", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha2:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha20", "product": { "name": "vers:unknown/1.0.0-alpha20", "product_id": "CSAFPID-5435669", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha20:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha21", "product": { "name": "vers:unknown/1.0.0-alpha21", "product_id": "CSAFPID-5435670", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha21:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha22", "product": { "name": "vers:unknown/1.0.0-alpha22", "product_id": "CSAFPID-5435671", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha22:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha23", "product": { "name": "vers:unknown/1.0.0-alpha23", "product_id": "CSAFPID-5435672", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha23:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha24", "product": { "name": "vers:unknown/1.0.0-alpha24", "product_id": "CSAFPID-5435673", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha24:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha25", "product": { "name": "vers:unknown/1.0.0-alpha25", "product_id": "CSAFPID-5435674", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha25:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha26", "product": { "name": "vers:unknown/1.0.0-alpha26", "product_id": "CSAFPID-5435675", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha26:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha27", "product": { "name": "vers:unknown/1.0.0-alpha27", "product_id": "CSAFPID-5435676", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha27:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha28", "product": { "name": "vers:unknown/1.0.0-alpha28", "product_id": "CSAFPID-5435677", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha28:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha29", "product": { "name": "vers:unknown/1.0.0-alpha29", "product_id": "CSAFPID-5435678", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha29:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha3", "product": { "name": "vers:unknown/1.0.0-alpha3", "product_id": "CSAFPID-5435679", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha3:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha30", "product": { "name": "vers:unknown/1.0.0-alpha30", "product_id": "CSAFPID-5435680", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha30:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha31", "product": { "name": "vers:unknown/1.0.0-alpha31", "product_id": "CSAFPID-5435681", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha31:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha32", "product": { "name": "vers:unknown/1.0.0-alpha32", "product_id": "CSAFPID-5435682", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha32:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha33", "product": { "name": "vers:unknown/1.0.0-alpha33", "product_id": "CSAFPID-5435683", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha33:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha34", "product": { "name": "vers:unknown/1.0.0-alpha34", "product_id": "CSAFPID-5435684", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha34:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha35", "product": { "name": "vers:unknown/1.0.0-alpha35", "product_id": "CSAFPID-5435685", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha35:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha36", "product": { "name": "vers:unknown/1.0.0-alpha36", "product_id": "CSAFPID-5435686", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha36:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha37", "product": { "name": "vers:unknown/1.0.0-alpha37", "product_id": "CSAFPID-5435687", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha37:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha38", "product": { "name": "vers:unknown/1.0.0-alpha38", "product_id": "CSAFPID-5435688", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha38:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha39", "product": { "name": "vers:unknown/1.0.0-alpha39", "product_id": "CSAFPID-5435689", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha39:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha4", "product": { "name": "vers:unknown/1.0.0-alpha4", "product_id": "CSAFPID-5435690", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha4:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha40", "product": { "name": "vers:unknown/1.0.0-alpha40", "product_id": "CSAFPID-5435691", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha40:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha41", "product": { "name": "vers:unknown/1.0.0-alpha41", "product_id": "CSAFPID-5435692", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha41:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha42", "product": { "name": "vers:unknown/1.0.0-alpha42", "product_id": "CSAFPID-5435693", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha42:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha43", "product": { "name": "vers:unknown/1.0.0-alpha43", "product_id": "CSAFPID-5435694", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha43:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha44", "product": { "name": "vers:unknown/1.0.0-alpha44", "product_id": "CSAFPID-5435695", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha44:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha45", "product": { "name": "vers:unknown/1.0.0-alpha45", "product_id": "CSAFPID-5435696", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha45:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha46", "product": { "name": "vers:unknown/1.0.0-alpha46", "product_id": "CSAFPID-5435697", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha46:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha47", "product": { "name": "vers:unknown/1.0.0-alpha47", "product_id": "CSAFPID-5435698", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha47:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha48", "product": { "name": "vers:unknown/1.0.0-alpha48", "product_id": "CSAFPID-5435699", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha48:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha49", "product": { "name": "vers:unknown/1.0.0-alpha49", "product_id": "CSAFPID-5435700", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha49:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha5", "product": { "name": "vers:unknown/1.0.0-alpha5", "product_id": "CSAFPID-5435701", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha5:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha50", "product": { "name": "vers:unknown/1.0.0-alpha50", "product_id": "CSAFPID-5435702", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha50:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha51", "product": { "name": "vers:unknown/1.0.0-alpha51", "product_id": "CSAFPID-5435703", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha51:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha52", "product": { "name": "vers:unknown/1.0.0-alpha52", "product_id": "CSAFPID-5435704", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha52:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha53", "product": { "name": "vers:unknown/1.0.0-alpha53", "product_id": "CSAFPID-5435705", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha53:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha54", "product": { "name": "vers:unknown/1.0.0-alpha54", "product_id": "CSAFPID-5435706", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha54:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha55", "product": { "name": "vers:unknown/1.0.0-alpha55", "product_id": "CSAFPID-5435707", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha55:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha56", "product": { "name": "vers:unknown/1.0.0-alpha56", "product_id": "CSAFPID-5435708", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha56:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha57", "product": { "name": "vers:unknown/1.0.0-alpha57", "product_id": "CSAFPID-5435709", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha57:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha58", "product": { "name": "vers:unknown/1.0.0-alpha58", "product_id": "CSAFPID-5435710", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha58:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha59", "product": { "name": "vers:unknown/1.0.0-alpha59", "product_id": "CSAFPID-5435711", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha59:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha6", "product": { "name": "vers:unknown/1.0.0-alpha6", "product_id": "CSAFPID-5435712", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha6:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha60", "product": { "name": "vers:unknown/1.0.0-alpha60", "product_id": "CSAFPID-5435713", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha60:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha61", "product": { "name": "vers:unknown/1.0.0-alpha61", "product_id": "CSAFPID-5435714", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha61:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha62", "product": { "name": "vers:unknown/1.0.0-alpha62", "product_id": "CSAFPID-5435715", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha62:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha63", "product": { "name": "vers:unknown/1.0.0-alpha63", "product_id": "CSAFPID-5435716", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha63:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha64", "product": { "name": "vers:unknown/1.0.0-alpha64", "product_id": "CSAFPID-5435717", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha64:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha65", "product": { "name": "vers:unknown/1.0.0-alpha65", "product_id": "CSAFPID-5435718", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha65:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha66", "product": { "name": "vers:unknown/1.0.0-alpha66", "product_id": "CSAFPID-5435719", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha66:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha67", "product": { "name": "vers:unknown/1.0.0-alpha67", "product_id": "CSAFPID-5435720", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha67:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha68", "product": { "name": "vers:unknown/1.0.0-alpha68", "product_id": "CSAFPID-5435721", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha68:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha69", "product": { "name": "vers:unknown/1.0.0-alpha69", "product_id": "CSAFPID-5435722", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha69:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha7", "product": { "name": "vers:unknown/1.0.0-alpha7", "product_id": "CSAFPID-5435723", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha7:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha70", "product": { "name": "vers:unknown/1.0.0-alpha70", "product_id": "CSAFPID-5435724", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha70:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha71", "product": { "name": "vers:unknown/1.0.0-alpha71", "product_id": "CSAFPID-5435725", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha71:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha72", "product": { "name": "vers:unknown/1.0.0-alpha72", "product_id": "CSAFPID-5435726", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha72:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha73", "product": { "name": "vers:unknown/1.0.0-alpha73", "product_id": "CSAFPID-5435727", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha73:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha74", "product": { "name": "vers:unknown/1.0.0-alpha74", "product_id": "CSAFPID-5435728", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha74:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha75", "product": { "name": "vers:unknown/1.0.0-alpha75", "product_id": "CSAFPID-5435729", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha75:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha76", "product": { "name": "vers:unknown/1.0.0-alpha76", "product_id": "CSAFPID-5435730", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha76:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha77", "product": { "name": "vers:unknown/1.0.0-alpha77", "product_id": "CSAFPID-5435731", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha77:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha78", "product": { "name": "vers:unknown/1.0.0-alpha78", "product_id": "CSAFPID-5435732", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha78:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha79", "product": { "name": "vers:unknown/1.0.0-alpha79", "product_id": "CSAFPID-5585906", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha79:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha8", "product": { "name": "vers:unknown/1.0.0-alpha8", "product_id": "CSAFPID-5435733", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha8:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha80", "product": { "name": "vers:unknown/1.0.0-alpha80", "product_id": "CSAFPID-5674760", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha80:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha81", "product": { "name": "vers:unknown/1.0.0-alpha81", "product_id": "CSAFPID-5674761", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha81:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha82", "product": { "name": "vers:unknown/1.0.0-alpha82", "product_id": "CSAFPID-5703814", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha82:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0-alpha9", "product": { "name": "vers:unknown/1.0.0-alpha9", "product_id": "CSAFPID-5435734", "product_identification_helper": { "cpe": "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha9:*:*:*:rust:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/<1.0.0-alpha.83", "product": { "name": "vers:unknown/<1.0.0-alpha.83", "product_id": "CSAFPID-5700860" } } ], "category": "product_name", "name": "rustfs" } ], "category": "vendor", "name": "rustfs" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-27822", "cwe": { "id": "CWE-79", "name": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')" }, "notes": [ { "category": "description", "text": "RustFS is a distributed object storage system built in Rust. Prior to version 1.0.0-alpha.83, a Stored Cross-Site Scripting (XSS) vulnerability in the RustFS Console allows an attacker to execute arbitrary JavaScript in the context of the management console. By bypassing the PDF preview logic, an attacker can steal administrator credentials from `localStorage`, leading to full account takeover and system compromise. Version 1.0.0-alpha.83 fixes the issue.", "title": "nvd - https://nvd.nist.gov/vuln/detail/CVE-2026-27822" }, { "category": "description", "text": "RustFS is a distributed object storage system built in Rust. Prior to version 1.0.0-alpha.83, a Stored Cross-Site Scripting (XSS) vulnerability in the RustFS Console allows an attacker to execute arbitrary JavaScript in the context of the management console. By bypassing the PDF preview logic, an attacker can steal administrator credentials from `localStorage`, leading to full account takeover and system compromise. Version 1.0.0-alpha.83 fixes the issue.", "title": "cveprojectv5 - https://www.cve.org/CVERecord?id=CVE-2026-27822" }, { "category": "description", "text": "### Summary\nA Stored Cross-Site Scripting (XSS) vulnerability in the RustFS Console allows an attacker to execute arbitrary JavaScript in the context of the management console. By bypassing the PDF preview logic, an attacker can steal administrator credentials from `localStorage`, leading to full account takeover and system compromise.\n\n### Details\nThe vulnerability exists due to improper validation of the response content type during the file preview process and a lack of origin separation between the S3 object delivery and the management console.\n\n1. **Origin of Credentials**: The RustFS Console stores highly sensitive S3 credentials (AccessKey, SecretKey, SessionToken) in the browser's `localStorage`.\n - **File**: `console/composables/useAuth.ts`\n - **Evidence**: [Lines 14](https://github.com/rustfs/console/blob/c2bd75adacad0d0182c32d5271e8ff150c4a02db/composables/useAuth.ts#L14) and [18-25](https://github.com/rustfs/console/blob/c2bd75adacad0d0182c32d5271e8ff150c4a02db/composables/useAuth.ts#L18-L25) show that credentials are held in `useLocalStorage('auth.credentials', {})` and `useLocalStorage('auth.permanent', undefined)`.\n2. **Insecure Preview Implementation**: In `console/components/object/preview-modal.vue`, the application identifies a PDF file based on its extension or metadata and [renders it using an `