Back to search
CVE-2026-45040
Published: May 28, 2026
Modified: Jun 2, 2026
PUBLISHED
Description
RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-beta.2, RustFS suffers from sensitive information leakage in log outputs. When the server is run with RUST_LOG=debug sensitive credentials including SessionToken (JWT), SecretAccessKey, and full JWT claims are printed in plaintext to the server logs. This vulnerability is fixed in 1.0.0-beta.2.
| Vendor | Product | Versions |
|---|---|---|
rustfs | rustfs | affected < 1.0.0-beta.2 |
References
https://github.com/rustfs/rustfs/security/advisories/GHSA-8cm2-h255-v749
x_refsource_CONFIRM
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now