Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2025-68705

RustFS Path Traversal Vulnerability

Description

RustFS is a distributed object storage system built in Rust. In versions 1.0.0-alpha.13 to 1.0.0-alpha.78, RustFS contains a path traversal vulnerability in the /rustfs/rpc/read_file_stream endpoint. This issue has been patched in version 1.0.0-alpha.79.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

rustfs rustfs

  • >= 1.0.0-alpha.13, < 1.0.0-alpha.79affected

References