CVE-2026-21862Disclosure(rustfs / rustfs)

LOWCVSS 7.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

RustFS is a distributed object storage system built in Rust. Prior to version alpha.78, IP-based access control can be bypassed: get_condition_values trusts client-supplied X-Forwarded-For/X-Real-Ip without verifying a trusted proxy, so any reachable client can spoof aws:SourceIp and satisfy IP-allowlist policies. This issue has been patched in version alpha.78.

rustfs CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://github.com/rustfs/rustfs/security/advisories/GHSA-fc6g-2gcp-2qrq

Weakness type (CWE)

CWE-290

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

rustfs

Threat summary

1 mentions across 1 observed day

What's happening

Technical details provided in 1 signal
Disclosure: 1 classified signal
1 total mentions across 1 day

Affected systems

Vendors

rustfs

Products

rustfs

1 version affected across 1 product

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Disclosure

1100.0%

Referenced assets1 URL

By indicator

https://cvereports.com/reports/CVE-2026-21862

Full discourse1 post

cvereports@_cvereports248d
Disclosure
CVE-2026-21862: Trust Issues: The RustFS IP Spoofing Bypass (CVE-2026-21862) RustFS, a distributed object storage system designed for safety and performance, fell victim to one of the oldest tricks in the book: trusting client input. Prior to version ... https://cvereports.com/reports/CVE-2026-21862
Post summary
A brief disclosure of an IP spoofing bypass vulnerability in RustFS caused by trusting client input; no PoC, exploit code, patch, or active exploitation details are provided.
0000043
27 followersView on X

CPE platform detail77 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

77 of 77 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-
App	rustfs	rustfs	1.0.0	rust	-

Explore more

Back to dashboard rustfs CVEs rustfs vulnerabilities