CVE-2026-55188

Name of the Vulnerable Software and Affected Versions RustFS versions 1.0.0-alpha.1 through 1.0.0-beta.8

Description An authorization bypass exists in the bucket replication admin API. The ListRemoteTargetHandler handler for listing remote replication targets verifies the existence of request credentials but fails to verify if the caller possesses replication or administrator permissions. Consequently, an authenticated user without the necessary permissions can list the remote replication target configuration for a bucket. Since the returned BucketTarget objects contain remote target credentials, this can lead to the disclosure of replication access keys and secret keys.

Recommendations Update to version 1.0.0-beta.9.