AUGUST 15, 2026
Live Feed
Back to database
Case File

CVE-2026-73265

MEDIUM · CVSS 6.5 EPSS 0.30% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-08-12 · Last synced 2026-08-15

CyberRota Analysis

AI-Generated

RustFS, a distributed object storage system, is vulnerable due to improper authorization in its handling of versioned object reads, allowing unauthorized users to access historical object content. This could lead to data exposure for sensitive information stored in previous versions of objects. Organizations using RustFS should prioritize updating to version 1.0.0-beta.11 to mitigate the risk of unauthorized data disclosure.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links
github.com ↗ github.com ↗ github.com ↗ github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-73265
Severity
MEDIUM
CVSS
6.5
EPSS
0.30%

Original NVD Description

RustFS is a distributed object storage system built in Rust. RustFS authorizes explicit versionId reads in GetObject, CopyObject sources, and UploadPartCopy sources with s3:GetObject instead of s3:GetObjectVersion, allowing principals without historical-version permission to disclose known historical object content. This issue is fixed in version 1.0.0-beta.11.