CVE Intelligence

Rust Rustfs vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Rust Rustfs: 2 record(s), with affected versions and fixes.

CVE-2025-69255 Medium · 4.0 CWE-755 Jan 7, 2026
RustFS gRPC GetMetrics deserialization panic enables remote DoS
RustFS is a distributed object storage system built in Rust. In versions 1.0.0-alpha.13 to 1.0.0-alpha.77, a malformed gRPC GetMetrics request causes get_metrics to unwrap() failed deserialization of metric_type/opts, panicking the handler thread and enabling remote denial of service of the metrics endpoint. This issue has been patched in version 1.0.0-alpha.78.
CVE-2025-68705 Critical · 9.8 CWE-22 Jan 7, 2026
RustFS Path Traversal Vulnerability
RustFS is a distributed object storage system built in Rust. In versions 1.0.0-alpha.13 to 1.0.0-alpha.78, RustFS contains a path traversal vulnerability in the /rustfs/rpc/read_file_stream endpoint. This issue has been patched in version 1.0.0-alpha.79.