Servers and applications
GHSA-g96f-g546-47xf
S3 gateway gRPC port exposes the IAM and lifecycle admin services without authentication when no filer signing key is configured, allowing anyone with network access to add an admin identity
- Severity
- High
- Published
- 9 Nov 2026
- Last changed
- 9 Nov 2026
- Added to UpHeron
- 9 Nov 2026
- Sources
- Project advisories (GitHub)
Affected software
| Software | Affected versions |
|---|---|
SeaweedFSServers and applications · github:seaweedfs/seaweedfs |
|
References
- GitHub Advisory Database https://github.com/advisories/GHSA-g96f-g546-47xf
- github.com https://github.com/seaweedfs/seaweedfs/security/advisories/GHSA-g96f-g546-47xf