Skip to content

RustFS: ListServiceAccount authorizes against wrong admin action, enabling cross-user enumeration and root service account takeover

High severity GitHub Reviewed Published Apr 25, 2026 in rustfs/rustfs • Updated May 5, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts