Go/github.com/seaweedfs/seaweedfs CVE-2026-72920: unknown, EPSS 0.78%

SeaweedFS: Unauthenticated filer IAM gRPC service grants S3 administrative control in github.com/seaweedfs/seaweedfs

Action: Upgrade github.com/seaweedfs/seaweedfs to 0.0.0-20260512171108-5e8f99f40a8a or later.

go get github.com/seaweedfs/seaweedfs@v0.0.0-20260512171108-5e8f99f40a8a

Affected

Fixed versions

Sources

• osv: GO-2026-6351
• https://github.com/seaweedfs/seaweedfs/security/advisories/GHSA-2v6v-25fm-p4fg
• https://nvd.nist.gov/vuln/detail/CVE-2026-72920
• https://github.com/seaweedfs/seaweedfs/commit/5e8f99f40a8abc7b449aefd260516443377041c7
• https://github.com/seaweedfs/seaweedfs/pull/9442
• https://github.com/seaweedfs/seaweedfs/releases/tag/4.24

CVE-2026-72920 · published 2026-09-10T14:48:42Z · modified 2026-09-10T15:26:01.399739050Z · JSON