RustFS is a distributed object storage system built in Rust. In versions 1.0.0-alpha.13 to 1.0.0-alpha.78, RustFS contains a path traversal vulnerability in the /rustfs/rpc/read_file_stream endpoint. This issue has been patched in version 1.0.0-alpha.79.
Fix
Public exploits 1
- imjdl/CVE-2025-68705 PoC on GitHub
Each line links to the index that lists it, never to exploit code. Exploit-DB's "verified" and a Metasploit rank of good or better count as verified; a PoC-in-GitHub entry is a repository's claim.
Patch, vendor advisory and mitigation references on NVD 2
- https://github.com/rustfs/rustfs/commit/ab752458ce431c6397175d167beee2ea00507d3e Patch
- https://github.com/rustfs/rustfs/security/advisories/GHSA-pq29-69jg-9mxc Exploit, Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 8.8 · rustfsNVD modified 2026-10-14 19:10
Affected (CPE criteria) 66
cpe:2.3:a:rustfs:rustfs:1.0.0:alpha13:*:*:*:rust:*:*cpe:2.3:a:rustfs:rustfs:1.0.0:alpha14:*:*:*:rust:*:*cpe:2.3:a:rustfs:rustfs:1.0.0:alpha15:*:*:*:rust:*:*cpe:2.3:a:rustfs:rustfs:1.0.0:alpha16:*:*:*:rust:*:*cpe:2.3:a:rustfs:rustfs:1.0.0:alpha17:*:*:*:rust:*:*cpe:2.3:a:rustfs:rustfs:1.0.0:alpha18:*:*:*:rust:*:*cpe:2.3:a:rustfs:rustfs:1.0.0:alpha19:*:*:*:rust:*:*cpe:2.3:a:rustfs:rustfs:1.0.0:alpha20:*:*:*:rust:*:*cpe:2.3:a:rustfs:rustfs:1.0.0:alpha21:*:*:*:rust:*:*cpe:2.3:a:rustfs:rustfs:1.0.0:alpha22:*:*:*:rust:*:*cpe:2.3:a:rustfs:rustfs:1.0.0:alpha23:*:*:*:rust:*:*cpe:2.3:a:rustfs:rustfs:1.0.0:alpha24:*:*:*:rust:*:*cpe:2.3:a:rustfs:rustfs:1.0.0:alpha25:*:*:*:rust:*:*cpe:2.3:a:rustfs:rustfs:1.0.0:alpha26:*:*:*:rust:*:*cpe:2.3:a:rustfs:rustfs:1.0.0:alpha27:*:*:*:rust:*:*cpe:2.3:a:rustfs:rustfs:1.0.0:alpha28:*:*:*:rust:*:*cpe:2.3:a:rustfs:rustfs:1.0.0:alpha29:*:*:*:rust:*:*cpe:2.3:a:rustfs:rustfs:1.0.0:alpha30:*:*:*:rust:*:*cpe:2.3:a:rustfs:rustfs:1.0.0:alpha31:*:*:*:rust:*:*cpe:2.3:a:rustfs:rustfs:1.0.0:alpha32:*:*:*:rust:*:*cpe:2.3:a:rustfs:rustfs:1.0.0:alpha33:*:*:*:rust:*:*cpe:2.3:a:rustfs:rustfs:1.0.0:alpha34:*:*:*:rust:*:*cpe:2.3:a:rustfs:rustfs:1.0.0:alpha35:*:*:*:rust:*:*cpe:2.3:a:rustfs:rustfs:1.0.0:alpha36:*:*:*:rust:*:*cpe:2.3:a:rustfs:rustfs:1.0.0:alpha37:*:*:*:rust:*:*cpe:2.3:a:rustfs:rustfs:1.0.0:alpha38:*:*:*:rust:*:*cpe:2.3:a:rustfs:rustfs:1.0.0:alpha39:*:*:*:rust:*:*cpe:2.3:a:rustfs:rustfs:1.0.0:alpha40:*:*:*:rust:*:*cpe:2.3:a:rustfs:rustfs:1.0.0:alpha41:*:*:*:rust:*:*cpe:2.3:a:rustfs:rustfs:1.0.0:alpha42:*:*:*:rust:*:*cpe:2.3:a:rustfs:rustfs:1.0.0:alpha43:*:*:*:rust:*:*cpe:2.3:a:rustfs:rustfs:1.0.0:alpha44:*:*:*:rust:*:*cpe:2.3:a:rustfs:rustfs:1.0.0:alpha45:*:*:*:rust:*:*cpe:2.3:a:rustfs:rustfs:1.0.0:alpha46:*:*:*:rust:*:*cpe:2.3:a:rustfs:rustfs:1.0.0:alpha47:*:*:*:rust:*:*cpe:2.3:a:rustfs:rustfs:1.0.0:alpha48:*:*:*:rust:*:*cpe:2.3:a:rustfs:rustfs:1.0.0:alpha49:*:*:*:rust:*:*cpe:2.3:a:rustfs:rustfs:1.0.0:alpha50:*:*:*:rust:*:*cpe:2.3:a:rustfs:rustfs:1.0.0:alpha51:*:*:*:rust:*:*cpe:2.3:a:rustfs:rustfs:1.0.0:alpha52:*:*:*:rust:*:*- and 26 more