seaweedfs vulnerabilities
CVEs whose affected-version data names the seaweedfs package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-100413High· 7.0SeaweedFS is a distributed storage system for files and blobs
SeaweedFS is a distributed storage system for files and blobs. From 4.0.388 until 4.41, the SFTP Helm chart embedded one unencrypted Ed25519 private host key in k8s/charts/seaweedfs/templates/sftp/sftp-secret.yaml as stringData.seaweedfs…
▾ Twilightseaweedfs · seaweedfsEPSS 0.42%via NVD
CVE-2026-58372High· 8.1PoCSeaweedFS before 4.34 contains a path traversal vulnerability in the S3 gateway DeleteMultipleObjectsHandler that allows authenticated S3 principals with write access to a single bucket to delete arbitrary objects in other tenants' bucke…
SeaweedFS before 4.34 contains a path traversal vulnerability in the S3 gateway DeleteMultipleObjectsHandler that allows authenticated S3 principals with write access to a single bucket to delete arbitrary objects in other tenants' bucke…
▾ Midnightseaweedfs · seaweedfsEPSS 0.87%via NVD