https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T05:02:32.515169+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-73284 CVE-2026-73284 — RustFS: AddServiceAccount Handler Allows Creation of Root-Parent Service Accounts 2026-10-08T05:02:32.535708+00:00

Affected: rustfs

RustFS is a distributed object storage system built in Rust. RustFS AddServiceAccount in rustfs/src/admin/handlers/service_account.rs accepts an attacker-controlled target_user after only checking CreateServiceAccountAdminAction, passes it to new_service_account, and prepare_service_account_auth sets is_owner for the resulting root-parent service account. This issue is fixed in version 1.0.0-beta.11.