CVE-2026-55873
2 advisories.
Go/github.com/seaweedfs/seaweedfs CVE-2026-55873: medium 4.3, EPSS 0.34%
SeaweedFS: Improper authorization in the S3Tables / Iceberg REST management API lets a low-privileged S3 user enumerate administrator-owned table buckets
Action: Upgrade github.com/seaweedfs/seaweedfs to 0.0.0-20260614205536-b13463880c1f or later.
go get github.com/seaweedfs/seaweedfs@v0.0.0-20260614205536-b13463880c1fAffected
| introduced | fixed | last affected |
|---|---|---|
| 0.0.0-20260128085517-09bb90e8dc16 | 0.0.0-20260614205536-b13463880c1f | - |
Fixed versions
| 0.0.0-20260614205536-b13463880c1f |
Sources
- osv: GHSA-hgpf-8634-g44c
- https://github.com/seaweedfs/seaweedfs/security/advisories/GHSA-hgpf-8634-g44c
- https://nvd.nist.gov/vuln/detail/CVE-2026-55873
- https://github.com/seaweedfs/seaweedfs/pull/9961
- https://github.com/seaweedfs/seaweedfs/commit/b13463880c1fa62e255c058a9228b63cc95b4b36
- https://github.com/seaweedfs/seaweedfs
- https://github.com/seaweedfs/seaweedfs/releases/tag/4.34
CVE-2026-55873 · published · modified · JSON
Go/github.com/seaweedfs/seaweedfs CVE-2026-55873: unknown, EPSS 0.34%
SeaweedFS: Improper authorization in the S3Tables / Iceberg REST management API lets a low-privileged S3 user enumerate administrator-owned table buckets in github.com/seaweedfs/seaweedfs
Action: Upgrade github.com/seaweedfs/seaweedfs to 0.0.0-20260614205536-b13463880c1f or later.
go get github.com/seaweedfs/seaweedfs@v0.0.0-20260614205536-b13463880c1fAffected
| introduced | fixed | last affected |
|---|---|---|
| 0.0.0-20260128085517-09bb90e8dc16 | 0.0.0-20260614205536-b13463880c1f | - |
Fixed versions
| 0.0.0-20260614205536-b13463880c1f |
Sources
- osv: GO-2026-6329
- https://github.com/seaweedfs/seaweedfs/security/advisories/GHSA-hgpf-8634-g44c
- https://nvd.nist.gov/vuln/detail/CVE-2026-55873
- https://github.com/seaweedfs/seaweedfs/commit/b13463880c1fa62e255c058a9228b63cc95b4b36
- https://github.com/seaweedfs/seaweedfs/pull/9961
- https://github.com/seaweedfs/seaweedfs/releases/tag/4.34
CVE-2026-55873 · published · modified · JSON