CVE-2026-45040
NONE—CVSS v3
—CVSS v2
0.02%
EPSS (exploit probability)
CWE-312CWE
Description
RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-beta.2, RustFS suffers from sensitive information leakage in log outputs. When the server is run with RUST_LOG=debug sensitive credentials including SessionToken (JWT), SecretAccessKey, and full JWT claims are printed in plaintext to the server logs. This vulnerability is fixed in 1.0.0-beta.2.
Affected routers (0)
No routers currently mapped to this CVE in our database.