CVE-2026-72920
2 advisories.
Go/github.com/seaweedfs/seaweedfs CVE-2026-72920: critical 9.8
SeaweedFS: Unauthenticated filer IAM gRPC service grants S3 administrative control
Action: Upgrade github.com/seaweedfs/seaweedfs to 0.0.0-20260512171108-5e8f99f40a8a or later.
go get github.com/seaweedfs/seaweedfs@v0.0.0-20260512171108-5e8f99f40a8aAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
| 0.0.0-20260512171108-5e8f99f40a8a |
Sources
- osv: GHSA-2v6v-25fm-p4fg
- https://github.com/seaweedfs/seaweedfs/security/advisories/GHSA-2v6v-25fm-p4fg
- https://nvd.nist.gov/vuln/detail/CVE-2026-72920
- https://github.com/seaweedfs/seaweedfs/pull/9442
- https://github.com/seaweedfs/seaweedfs/commit/5e8f99f40a8abc7b449aefd260516443377041c7
- https://github.com/seaweedfs/seaweedfs
- https://github.com/seaweedfs/seaweedfs/releases/tag/4.24
CVE-2026-72920 · published · modified · JSON
Go/github.com/seaweedfs/seaweedfs CVE-2026-72920: unknown
SeaweedFS: Unauthenticated filer IAM gRPC service grants S3 administrative control in github.com/seaweedfs/seaweedfs
Action: Upgrade github.com/seaweedfs/seaweedfs to 0.0.0-20260512171108-5e8f99f40a8a or later.
go get github.com/seaweedfs/seaweedfs@v0.0.0-20260512171108-5e8f99f40a8aAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
| 0.0.0-20260512171108-5e8f99f40a8a |
Sources
- osv: GO-2026-6351
- https://github.com/seaweedfs/seaweedfs/security/advisories/GHSA-2v6v-25fm-p4fg
- https://nvd.nist.gov/vuln/detail/CVE-2026-72920
- https://github.com/seaweedfs/seaweedfs/commit/5e8f99f40a8abc7b449aefd260516443377041c7
- https://github.com/seaweedfs/seaweedfs/pull/9442
- https://github.com/seaweedfs/seaweedfs/releases/tag/4.24
CVE-2026-72920 · published · modified · JSON