by Kastro
Paper/Archive/CVE-2026-27822

CVE-2026-27822

rustfs rustfs — Rust has Critical Stored XSS in Preview Modal, leading to Administrative Account Takeover

EPSS 5%CVSS 9.1
critical.is priorityof 100
46
CVSS 9.1 (CNA)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 92.3.923 × 2018.5No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

RustFS is a distributed object storage system built in Rust. Prior to version 1.0.0-alpha.83, a Stored Cross-Site Scripting (XSS) vulnerability in the RustFS Console allows an attacker to execute arbitrary JavaScript in the context of the management console. By bypassing the PDF preview logic, an attacker can steal administrator credentials from `localStorage`, leading to full account takeover and system compromise. Version 1.0.0-alpha.83 fixes the issue.

Affected

ProductAffectedFixed inSource
rustfs< 1.0.0-alpha.83–CNA

Scores by source

GitHub_M (CNA)9.1CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refgithub.com/rustfs/rustfs/security/advisories/GHSA-v9fg-3cr2-277j