Rucio vulnerabilities

Products

• Rucio 9
• Helm-charts 5

Newest

• rucio Rucio: Authorisation Bypass on REST API endpoint for signing URLs CVE-2026-58273 Fix available 8.1 HighOctober 28, 2026
• cloudpirates-io helm-charts CloudPirates Open Source Helm Charts: pull_request_target workflow vulnerable to cache poisoning and OIDC token theft CVE-2026-54532 6.9 MediumOctober 22, 2026
• mailu helm-charts, mailu +1 more Mailu: Authentication bypass in header-based proxy authentication via spoofable `X-Forwarded-By` trust CVE-2026-85751 9.8 CriticalSeptember 21, 2026
• cloudpirates-io helm-charts CloudPirates Open Source Helm Charts: GitHub Actions pull_request_target workflow allows secret exfiltration via fork pull requests CVE-2026-45131 Public exploit 10.0 CriticalJune 1, 2026
• cloudpirates-io helm-charts CloudPirates Open Source Helm Charts: GitHub Actions workflow leaks PAT and SSH signing key via unsafe credential handling CVE-2026-45132 Public exploit 10.0 CriticalJune 1, 2026
• cern rucio Rucio SQL injection in postgres_meta DID search path compromises PostgreSQL metadata database CVE-2026-29090 Fix available 9.0 CriticalMay 6, 2026
• cern rucio Rucio SQL Injection in FilterEngine Oracle JSON Path via DID Search API CVE-2026-29080 Fix available 9.4 CriticalMay 6, 2026
• cern rucio Rucio WebUI has a Stored Cross-site Scripting (XSS) Vulnerability in its Custom RSE Attribute CVE-2026-25736 Fix available 6.1 MediumFebruary 25, 2026
• cern rucio Rucio WebUI has a Stored Cross-site Scripting (XSS) vulnerability its Identity Name CVE-2026-25735 Fix available 6.1 MediumFebruary 25, 2026
• cern rucio Rucio WebUI has Stored Cross-site Scripting (XSS) in RSE Metadata CVE-2026-25734 Fix available 6.1 MediumFebruary 25, 2026
• cern rucio Rucio WebUI Vulnerable to Stored Cross-site Scripting (XSS) through Custom Rule Function CVE-2026-25733 Fix available 7.3 HighFebruary 25, 2026
• cern rucio Rucio WebUI has Username Enumeration via Login Error Message CVE-2026-25138 Fix available 5.3 MediumFebruary 25, 2026
• cern rucio Rucio WebUI has a Reflected Cross-site Scripting Vulnerability CVE-2026-25136 Fix available 8.1 HighFebruary 25, 2026
• rucio helm-charts rucio-server, rucio-ui, and rucio-webui vulnerable to insertion of X-Rucio-Auth-Token in apache access logfiles CVE-2025-54064 6.9 MediumJuly 17, 2025