A hardcoded access token has been identified in RustFS
In the RustFS project, which develops an S3-compatible distributed object storage system written in Rust, a vulnerability (CVE-2025-68926) has been discovered, resembling a backdoor. The issue is caused by a hardcoded access token in the code that allows connection to a network service via the gRPC protocol by setting the "authorization" header to "rustfs rpc". The token was present in both the server and client code. The issue has been assigned a critical severity level […]
