VYPR
← All advisories
High severity7.5NVD Advisory· Published Feb 3, 2026· Updated Jun 17, 2026

CVE-2026-24762

CVE-2026-24762

Description

RustFS is a distributed object storage system built in Rust. From versions alpha.13 to alpha.81, RustFS logs sensitive credential material (access key, secret key, session token) to application logs at INFO level. This results in credentials being recorded in plaintext in log output, which may be accessible to internal or external log consumers and could lead to compromise of sensitive credentials. This issue has been patched in version alpha.82.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
rustfscrates.io
>= 1.0.0-alpha.13, < 1.0.0-alpha.821.0.0-alpha.82

Affected products

71
  • Rustfs/Rustfs70 versions
    cpe:2.3:a:rustfs:rustfs:1.0.0:alpha13:*:*:*:rust:*:*+ 69 more
    • cpe:2.3:a:rustfs:rustfs:1.0.0:alpha13:*:*:*:rust:*:*
    • cpe:2.3:a:rustfs:rustfs:1.0.0:alpha14:*:*:*:rust:*:*
    • cpe:2.3:a:rustfs:rustfs:1.0.0:alpha15:*:*:*:rust:*:*
    • cpe:2.3:a:rustfs:rustfs:1.0.0:alpha16:*:*:*:rust:*:*
    • cpe:2.3:a:rustfs:rustfs:1.0.0:alpha17:*:*:*:rust:*:*
    • cpe:2.3:a:rustfs:rustfs:1.0.0:alpha18:*:*:*:rust:*:*
    • cpe:2.3:a:rustfs:rustfs:1.0.0:alpha19:*:*:*:rust:*:*
    • cpe:2.3:a:rustfs:rustfs:1.0.0:alpha20:*:*:*:rust:*:*
    • cpe:2.3:a:rustfs:rustfs:1.0.0:alpha21:*:*:*:rust:*:*
    • cpe:2.3:a:rustfs:rustfs:1.0.0:alpha22:*:*:*:rust:*:*
    • cpe:2.3:a:rustfs:rustfs:1.0.0:alpha23:*:*:*:rust:*:*
    • cpe:2.3:a:rustfs:rustfs:1.0.0:alpha24:*:*:*:rust:*:*
    • cpe:2.3:a:rustfs:rustfs:1.0.0:alpha25:*:*:*:rust:*:*
    • cpe:2.3:a:rustfs:rustfs:1.0.0:alpha26:*:*:*:rust:*:*
    • cpe:2.3:a:rustfs:rustfs:1.0.0:alpha27:*:*:*:rust:*:*
    • cpe:2.3:a:rustfs:rustfs:1.0.0:alpha28:*:*:*:rust:*:*
    • cpe:2.3:a:rustfs:rustfs:1.0.0:alpha29:*:*:*:rust:*:*
    • cpe:2.3:a:rustfs:rustfs:1.0.0:alpha30:*:*:*:rust:*:*
    • cpe:2.3:a:rustfs:rustfs:1.0.0:alpha31:*:*:*:rust:*:*
    • cpe:2.3:a:rustfs:rustfs:1.0.0:alpha32:*:*:*:rust:*:*
    • cpe:2.3:a:rustfs:rustfs:1.0.0:alpha33:*:*:*:rust:*:*
    • cpe:2.3:a:rustfs:rustfs:1.0.0:alpha34:*:*:*:rust:*:*
    • cpe:2.3:a:rustfs:rustfs:1.0.0:alpha35:*:*:*:rust:*:*
    • cpe:2.3:a:rustfs:rustfs:1.0.0:alpha36:*:*:*:rust:*:*
    • cpe:2.3:a:rustfs:rustfs:1.0.0:alpha37:*:*:*:rust:*:*
    • cpe:2.3:a:rustfs:rustfs:1.0.0:alpha38:*:*:*:rust:*:*
    • cpe:2.3:a:rustfs:rustfs:1.0.0:alpha39:*:*:*:rust:*:*
    • cpe:2.3:a:rustfs:rustfs:1.0.0:alpha40:*:*:*:rust:*:*
    • cpe:2.3:a:rustfs:rustfs:1.0.0:alpha41:*:*:*:rust:*:*
    • cpe:2.3:a:rustfs:rustfs:1.0.0:alpha42:*:*:*:rust:*:*
    • cpe:2.3:a:rustfs:rustfs:1.0.0:alpha43:*:*:*:rust:*:*
    • cpe:2.3:a:rustfs:rustfs:1.0.0:alpha44:*:*:*:rust:*:*
    • cpe:2.3:a:rustfs:rustfs:1.0.0:alpha45:*:*:*:rust:*:*
    • cpe:2.3:a:rustfs:rustfs:1.0.0:alpha46:*:*:*:rust:*:*
    • cpe:2.3:a:rustfs:rustfs:1.0.0:alpha47:*:*:*:rust:*:*
    • cpe:2.3:a:rustfs:rustfs:1.0.0:alpha48:*:*:*:rust:*:*
    • cpe:2.3:a:rustfs:rustfs:1.0.0:alpha49:*:*:*:rust:*:*
    • cpe:2.3:a:rustfs:rustfs:1.0.0:alpha50:*:*:*:rust:*:*
    • cpe:2.3:a:rustfs:rustfs:1.0.0:alpha51:*:*:*:rust:*:*
    • cpe:2.3:a:rustfs:rustfs:1.0.0:alpha52:*:*:*:rust:*:*
    • cpe:2.3:a:rustfs:rustfs:1.0.0:alpha53:*:*:*:rust:*:*
    • cpe:2.3:a:rustfs:rustfs:1.0.0:alpha54:*:*:*:rust:*:*
    • cpe:2.3:a:rustfs:rustfs:1.0.0:alpha55:*:*:*:rust:*:*
    • cpe:2.3:a:rustfs:rustfs:1.0.0:alpha56:*:*:*:rust:*:*
    • cpe:2.3:a:rustfs:rustfs:1.0.0:alpha57:*:*:*:rust:*:*
    • cpe:2.3:a:rustfs:rustfs:1.0.0:alpha58:*:*:*:rust:*:*
    • cpe:2.3:a:rustfs:rustfs:1.0.0:alpha59:*:*:*:rust:*:*
    • cpe:2.3:a:rustfs:rustfs:1.0.0:alpha60:*:*:*:rust:*:*
    • cpe:2.3:a:rustfs:rustfs:1.0.0:alpha61:*:*:*:rust:*:*
    • cpe:2.3:a:rustfs:rustfs:1.0.0:alpha62:*:*:*:rust:*:*
    • cpe:2.3:a:rustfs:rustfs:1.0.0:alpha63:*:*:*:rust:*:*
    • cpe:2.3:a:rustfs:rustfs:1.0.0:alpha64:*:*:*:rust:*:*
    • cpe:2.3:a:rustfs:rustfs:1.0.0:alpha65:*:*:*:rust:*:*
    • cpe:2.3:a:rustfs:rustfs:1.0.0:alpha66:*:*:*:rust:*:*
    • cpe:2.3:a:rustfs:rustfs:1.0.0:alpha67:*:*:*:rust:*:*
    • cpe:2.3:a:rustfs:rustfs:1.0.0:alpha68:*:*:*:rust:*:*
    • cpe:2.3:a:rustfs:rustfs:1.0.0:alpha69:*:*:*:rust:*:*
    • cpe:2.3:a:rustfs:rustfs:1.0.0:alpha70:*:*:*:rust:*:*
    • cpe:2.3:a:rustfs:rustfs:1.0.0:alpha71:*:*:*:rust:*:*
    • cpe:2.3:a:rustfs:rustfs:1.0.0:alpha72:*:*:*:rust:*:*
    • cpe:2.3:a:rustfs:rustfs:1.0.0:alpha73:*:*:*:rust:*:*
    • cpe:2.3:a:rustfs:rustfs:1.0.0:alpha74:*:*:*:rust:*:*
    • cpe:2.3:a:rustfs:rustfs:1.0.0:alpha75:*:*:*:rust:*:*
    • cpe:2.3:a:rustfs:rustfs:1.0.0:alpha76:*:*:*:rust:*:*
    • cpe:2.3:a:rustfs:rustfs:1.0.0:alpha77:*:*:*:rust:*:*
    • cpe:2.3:a:rustfs:rustfs:1.0.0:alpha78:*:*:*:rust:*:*
    • cpe:2.3:a:rustfs:rustfs:1.0.0:alpha79:*:*:*:rust:*:*
    • cpe:2.3:a:rustfs:rustfs:1.0.0:alpha80:*:*:*:rust:*:*
    • cpe:2.3:a:rustfs:rustfs:1.0.0:alpha81:*:*:*:rust:*:*
    • (no CPE)range: >= alpha.13, < alpha.82
  • ghsa-coords
    pkg:cargo/rustfs
    Range: >= 1.0.0-alpha.13, < 1.0.0-alpha.82

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.