{"id":"EUVD-2026-1162","enisaUuid":"28154491-f1f8-3689-a450-267dbc16e21f","description":"RustFS is a distributed object storage system built in Rust. In versions 1.0.0-alpha.13 to 1.0.0-alpha.78, RustFS contains a path traversal vulnerability in the /rustfs/rpc/read_file_stream endpoint. This issue has been patched in version 1.0.0-alpha.79.","datePublished":"Jan 7, 2026, 8:31:44 PM","dateUpdated":"Jan 7, 2026, 9:28:30 PM","baseScore":8.8,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:P","references":"https://github.com/rustfs/rustfs/security/advisories/GHSA-pq29-69jg-9mxc\nhttps://github.com/rustfs/rustfs/commit/ab752458ce431c6397175d167beee2ea00507d3e\n","aliases":"CVE-2025-68705\nGHSA-pq29-69jg-9mxc\n","assigner":"GitHub_M","epss":7.26,"enisaIdProduct":[{"id":"1712f219-b740-3783-bb0a-eac006203e19","product":{"name":"rustfs","vendor":{"name":"rustfs"}},"product_version":"1.0.0-alpha.13, \u003c 1.0.0-alpha.79"}],"enisaIdVendor":[{"id":"5c4c62ee-c4e4-32c6-9a28-3423fb2ad17c","vendor":{"name":"rustfs"}}],"enisaIdVulnerability":[{"id":"1facfff6-a7cd-3321-b835-304d993a03db","vulnerability":{"id":"GHSA-pq29-69jg-9mxc","description":"RustFS Path Traversal Vulnerability","datePublished":"Jan 7, 2026, 6:15:29 PM","dateUpdated":"Jan 7, 2026, 9:34:33 PM","baseScore":0.0,"references":"https://github.com/rustfs/rustfs/security/advisories/GHSA-pq29-69jg-9mxc\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-68705\nhttps://github.com/rustfs/rustfs/commit/ab752458ce431c6397175d167beee2ea00507d3e\nhttps://github.com/rustfs/rustfs\n","enisa_id":"EUVD-2026-1162\n","aliases":"CVE-2025-68705\nGHSA-pq29-69jg-9mxc\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 1:57:39 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"a75711c1-e2b3-33b9-bc3b-72bbb578eeba","vulnerability":{"id":"CVE-2025-68705","description":"RustFS is a distributed object storage system built in Rust. In versions 1.0.0-alpha.13 to 1.0.0-alpha.78, RustFS contains a path traversal vulnerability in the /rustfs/rpc/read_file_stream endpoint. This issue has been patched in version 1.0.0-alpha.79.","datePublished":"Jan 7, 2026, 8:31:44 PM","dateUpdated":"Jan 7, 2026, 9:28:30 PM","status":"PUBLISHED","baseScore":8.8,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:P","references":"https://github.com/rustfs/rustfs/security/advisories/GHSA-pq29-69jg-9mxc\nhttps://github.com/rustfs/rustfs/commit/ab752458ce431c6397175d167beee2ea00507d3e\n","enisa_id":"EUVD-2026-1162\n","assigner":"GitHub_M","epss":7.26,"dataProcessed":"Nov 1, 2026, 1:38:53 AM","vulnerabilityProduct":[{"id":"02900b10-90de-3fb9-aa9f-a0dcc1443c78","product":{"name":"rustfs","vendor":{"name":"rustfs"}},"product_version":"1.0.0-alpha.13, \u003c 1.0.0-alpha.79"}],"vulnerabilityVendor":[{"id":"d60dd574-5b84-3372-806c-d5eff33a6203","vendor":{"name":"rustfs"}}]}}],"enisaIdAdvisory":[]}