SeaweedFS: Filer JWT allowed_prefixes literal prefix match allows cross-tenant access to sibling paths

Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.

CVE-2026-72921 · CVE overview and exploitation status

EUVD-2026-56159

GHSA-gv5w-hfx8-8cwq

BIT-seaweedfs-2026-72921

GO-2026-6361

cve-program · CVE-2026-72921

• https://github.com/seaweedfs/seaweedfs/security/advisories/GHSA-gv5w-hfx8-8cwq
• https://github.com/seaweedfs/seaweedfs/pull/9439
• https://github.com/seaweedfs/seaweedfs/commit/05ed5c9ae8a2a45101b52b61d02f170d20d587ff
• https://github.com/seaweedfs/seaweedfs/releases/tag/4.24

euvd · EUVD-2026-56159

• https://github.com/seaweedfs/seaweedfs/security/advisories/GHSA-gv5w-hfx8-8cwq
• https://github.com/seaweedfs/seaweedfs/pull/9439
• https://github.com/seaweedfs/seaweedfs/commit/05ed5c9ae8a2a45101b52b61d02f170d20d587ff
• https://github.com/seaweedfs/seaweedfs/releases/tag/4.24

nvd · CVE-2026-72921

• https://github.com/seaweedfs/seaweedfs/commit/05ed5c9ae8a2a45101b52b61d02f170d20d587ff
• https://github.com/seaweedfs/seaweedfs/pull/9439
• https://github.com/seaweedfs/seaweedfs/releases/tag/4.24
• https://github.com/seaweedfs/seaweedfs/security/advisories/GHSA-gv5w-hfx8-8cwq

osv · GHSA-gv5w-hfx8-8cwq

• https://github.com/seaweedfs/seaweedfs/security/advisories/GHSA-gv5w-hfx8-8cwq
• https://nvd.nist.gov/vuln/detail/CVE-2026-72921
• https://github.com/seaweedfs/seaweedfs/pull/9439
• https://github.com/seaweedfs/seaweedfs/commit/05ed5c9ae8a2a45101b52b61d02f170d20d587ff
• https://github.com/seaweedfs/seaweedfs
• https://github.com/seaweedfs/seaweedfs/releases/tag/4.24

osv · GO-2026-6361

• https://github.com/seaweedfs/seaweedfs/security/advisories/GHSA-gv5w-hfx8-8cwq
• https://nvd.nist.gov/vuln/detail/CVE-2026-72921
• https://github.com/seaweedfs/seaweedfs/commit/05ed5c9ae8a2a45101b52b61d02f170d20d587ff
• https://github.com/seaweedfs/seaweedfs/pull/9439
• https://github.com/seaweedfs/seaweedfs/releases/tag/4.24

No related changes are available here.